Jira - Path Traversal (CVE-2023-26255)

CVE-2023-26255 is a path traversal vulnerability affecting the "STAGIL Navigation for Jira - Menu & Themes" plugin. An attacker can exploit this weakness to read arbitrary files on the system by manipulating requests to a specific plugin endpoint.

CrowdSec has been tracking this vulnerability and its exploits since 7th of May 2025.

According to CrowdSec data, while opportunistic exploitation dominates, a portion of threat actors trying to exploit CVE-2023-26255 apply basic targeting methods such as port or service detection. This indicates emerging patterns of selective targeting. Additionally, according to week-over-week analysis by CrowdSec, exploitation of CVE-2023-26255 is surging. Attack volumes are spiking well above historical norms, indicating widespread and escalating interest from threat actors. CVE-2023-26255 is currently experiencing high visibility and active exploitation across the internet.

Detected exploitation attempts typically target URLs containing /plugins/servlet/snjcustomdesignconfig.