The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://jenkins.io/security/advisory/2017-07-10/ |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-04T01:00:00
Updated: 2024-08-05T21:53:06.666Z
Reserved: 2017-07-13T00:00:00
Link: CVE-2017-1000088
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-10-05T01:29:03.633
Modified: 2017-11-02T15:08:35.320
Link: CVE-2017-1000088
Redhat
No data.