Medium severity5.4NVD Advisory· Published Oct 5, 2017· Updated May 13, 2026

CVE-2017-1000088

Description

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:sidebar-linkMaven	< 1.9	1.9

Affected products

Jenkins/Sidebar Link
cpe:2.3:a:jenkins:sidebar_link:*:*:*:*:*:jenkins:*:*
Range: <=1.8

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/advisories/GHSA-477r-v22q-r42fghsaADVISORY
jenkins.io/security/advisory/2017-07-10/nvdVendor Advisory
nvd.nist.gov/vuln/detail/CVE-2017-1000088ghsaADVISORY
jenkins.io/security/advisory/2017-07-10ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000