References https://www.tenable.com/plugins/nessus/183745 https://isc.sans.edu/diary/30038 https://nvd.nist.gov/vuln/detail/CVE-2023-26256 https://github.com/advisories/GHSA-g279-3gh8-w39f https://www.securityweek.com/two-jira-plugin-vulnerabilities-in-attacker-crosshairs/ https://www.sentinelone.com/vulnerability-database/cve-2023-26256/ https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26256.yaml https://stagil.atlassian.net/wiki/spaces/SNJ/pages https://www.stagil.com/products/stagil-apps-for-jira/stagil-navigation-for-jira https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=34261 https://www.cert.gov.py/vulnerabilidad-del-tipo-path-traversal-en-plugin-de-jira/
Related VulnerabilitiesPoCCVE-2023-26255: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File InclusionPoCCVE-2023-26256: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File InclusionWordPress plugin Navigation Du Lapin Blanc 跨站脚本漏洞亿赛通电子文档管理系统 NavigationAjax SQL注入漏洞亿赛通电子文档管理系统 NavigationAjax 存在SQL注入漏洞亿赛通电子文档安全系统 NavigationAjax SQL注入漏洞STAGIL Navigation for Jira目录遍历漏洞STAGIL Navigation 低于2.0.52版本存在任意文件读取漏洞(CVE-2023-26256)STAGIL Navigation 低于2.0.52版本存在任意文件读取漏洞(CVE-2023-26255)Olaf Noehring的Search Engine Project 'pagenavigation.php' PHP远程文件包含漏洞