Vulnerabilities (CVE)

Filtered by vendor Stagil Subscribe
Filtered by product Stagil Navigation
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-26256 1 Stagil 1 Stagil Navigation 2024-11-21 N/A 7.5 HIGH
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system.
CVE-2023-26255 1 Stagil 1 Stagil Navigation 2024-11-21 N/A 7.5 HIGH
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.