CVSS 3.0
5.4 mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCVE-2017-1000088
Medium (5.4) in jenkins sidebar link. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:sidebar-link 1.9.
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:sidebar_link
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-477r-v22q-r42f | Maven | org.jenkins-ci.plugins:sidebar-link | <1.9 | 1.9 |