GHSA-477r-v22q-r42f

ghsaUSosv

Persisted XSS Vulnerability in Jenkins Sidebar Link Plugin

view advisory published 2022-05-17Licence: CC-BY-4.0

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-1000088US	medium5.4	0.70% (53rd)	—	2017-10-05
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were…

references

External citations — patches, advisories, analysis.

https://jenkins.io/security/advisory/2017-07-10WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-1000088ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan