Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:sidebar_link:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

VendorJenkins (d708d718-2e77-5ca3-ae9c-38ee4d256744)
ProductSidebar Link (756e4986-1e42-5a4c-9fdc-0ab957baf4ea)
Edition*
Language*
Software edition*
Target softwarejenkins
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32985 vulnerable 2026-06-08 06:04:48.142260 Details available
Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
Published: 2023-05-16T16:00:06.702Z
Updated: 2025-01-23T20:32:17.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1000088 vulnerable 2026-06-08 05:08:33.852509 Details available
The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.
Published: 2017-10-04T01:00:00.000Z
Updated: 2024-08-05T21:53:06.666Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.