CVE-2023-26255
An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira – Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse and read the file system.
Source: CVE-2023-26255