1. Home
  2. CVE Database
  3. CVE-2017-1000088
MEDIUM · 5.4

CVE-2017-1000088

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascr...

Vulnerability Description

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.

CVSS Score

5.4

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
JenkinsSidebar Link<= 1.8

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2017-1000088?

CVE-2017-1000088 is a vulnerability with a CVSS score of 5.4 (MEDIUM). The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascr...

How severe is CVE-2017-1000088?

CVE-2017-1000088 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-1000088?

Check the references section above for vendor advisories and patch information. Affected products include: Jenkins Sidebar Link.