GCVE - cpe:2.3:a:stagil:stagil_navigation:*:*:*:*:*:jira:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:stagil:stagil_navigation:*:*:*:*:*:jira:*:*

part: a version: * update: *

Vendor	Stagil (`41e9d3c1-7be2-5c83-8284-03bca77357bb`)
Product	Stagil Navigation (`e28cb817-a8d8-50aa-8558-0f83673c9c63`)
Edition	*
Language	*
Software edition	*
Target software	jira
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-26256`	vulnerable	2026-06-08 05:57:38.975770	Details available An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traverse and read the file system. Published: 2023-02-28T00:00:00.000Z Updated: 2025-03-21T20:08:22.834Z Open on db.gcve.eu Reference links https://marketplace.atlassian.com/apps/1216090/stagil-navigation-for-jira-menus-themes?tab=overview&hosting=cloud https://github.com/1nters3ct/CVEs/blob/main/CVE-2023-26256.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26255`	vulnerable	2026-06-08 05:57:38.975178	Details available An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system. Published: 2023-02-28T00:00:00.000Z Updated: 2025-03-18T15:51:59.416Z Open on db.gcve.eu Reference links https://marketplace.atlassian.com/apps/1216090/stagil-navigation-for-jira-menus-themes?tab=overview&hosting=cloud https://github.com/1nters3ct/CVEs/blob/main/CVE-2023-26255.md	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.