What is GHSA-477r-v22q-r42f?

GHSA-477r-v22q-r42f is a security advisory published by GitHub Security Advisories with Medium severity. Persisted XSS Vulnerability in Jenkins Sidebar Link Plugin

Which CVE IDs does GHSA-477r-v22q-r42f cover?

GHSA-477r-v22q-r42f covers the following CVE IDs: CVE-2017-1000088. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-477r-v22q-r42f?

GHSA-477r-v22q-r42f has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-477r-v22q-r42f?

GHSA-477r-v22q-r42f affects 1 product, including: maven/org.jenkins-ci.plugins:sidebar-link:\u003c= 1.8.

GHSA-477r-v22q-r42fMediumCVSS 5.4

Persisted XSS Vulnerability in Jenkins Sidebar Link Plugin

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

January 30, 2024

🔗 CVE IDs covered (1)

CVE-2017-1000088 →

📋 Description

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.

🎯 Affected products1

maven/org.jenkins-ci.plugins:sidebar-link:<= 1.8

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2017-1000088
https://jenkins.io/security/advisory/2017-07-10/
https://github.com/advisories/GHSA-477r-v22q-r42f