Jira plugin STAGIL Navigation FileName Parameter Arbitrary File Read Vulnerability POC Script

Usage as follows:

Single URL Detection

1. Use the command line to detect a single URL, pass the URL parameter with -U

2. Observe the returned result; if it shows "is vulnerable!", then the vulnerability exists in this URL, otherwise it does not exist.

Batch URL Detection

1. Put assets found via FOFA or URLs to be tested into any TXT file

2. Use the command line to call the TXT file containing URLs, use -U parameter to batch scan the URLs in the file

3. Observe the returned result; if it shows "is vulnerable!", then the vulnerability exists in this URL, otherwise it does not exist.

< br >

Demonstration of script usage for single URL detection:

Here we demonstrate using an "asset" found in FOFA

1. Execute with python3 CVE-2023-26255-6.py -u http://xxxxx.com

2. Observe the returned result

< br >

Demonstration of script usage for batch URL detection:

Here we demonstrate using an "asset" found in FOFA

1. Execute with python3 CVE-2023-26255-6.py -f url.txt

2. Observe the returned result

Execution results as follows

< br >

Disclaimer:

The content of this article is provided for security research and teaching purposes only. Any direct or indirect consequences or losses caused by the dissemination or use of the information provided in this article shall be borne by the user. The author assumes no responsibility.