GitHub Advisoryadvisory · Maven

GHSA-477r-v22q-r42f Persisted XSS Vulnerability in Jenkins Sidebar Link Plugin

MEDIUM Published 2022-05-17 Modified 2024-01-30 Official page ↗
Aliases
CVE-2017-1000088
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:sidebar-link
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2024-01-30

Affected packages

• Maven org.jenkins-ci.plugins:sidebar-link: < 1.9 → fixed in 1.9

Description

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.

Related

Alias · CVE (1)

  • CVE-2017-1000088 The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References