CVE-2023-26255
Published: 28 February 2023
Summary
CVE-2023-26255 is a high-severity Path Traversal (CWE-22) vulnerability in Stagil Stagil Navigation. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 0.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The vulnerability CVE-2023-26255 is an unauthenticated path traversal flaw in the STAGIL Navigation for Jira - Menu & Themes plugin for Jira, affecting all versions before 2.0.52. The issue occurs in the snjCustomDesignConfig endpoint, where an attacker can alter the fileName parameter to traverse directories and read arbitrary files from the server file system; it is tracked as CWE-22 and carries a CVSS 3.1 score of 7.5.
Unauthenticated remote attackers can exploit the flaw over the network with low attack complexity to obtain high-impact confidentiality access to sensitive files, without requiring user interaction or privileges.
Public references consist of a GitHub repository containing technical details of the vulnerability and the Atlassian Marketplace listing for the affected plugin.
The associated EPSS score is 0.9356 at both its current and peak values.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-30079
Vulnerability details
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.