CVE-2017-1000088 — The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects

Back Back to CVE browser

MEDIUM

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects

Published Oct 4, 2017

5.4

MEDIUM

CVSS 3.0

EPSS 0.70%

Description

The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.70% 0.00705

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00705

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.70% (0.00705)	51.63th	v5 (v2026.06.15)
Sep 20, 2026	0.70% (0.00705)	51.91th	v5 (v2026.06.15)
Jul 20, 2024	0.05% (0.00054)	22.13th	v3 (v2023.03.01)
Jul 16, 2024	0.05% (0.00054)	22.05th	v3 (v2023.03.01)
Mar 7, 2023	0.05% (0.00054)	20.04th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	0.42% (0.00416)	10.04th	v5 (v2026.06.15)
Apr 14, 2021	0.42% (0.00416)	0.00th	v1

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://github.com/advisories/GHSA-477r-v22q-r42f
Advisory
https://jenkins.io/security/advisory/2017-07-10/
x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000088

Link	Providers	Tags
https://github.com/advisories/GHSA-477r-v22q-r42f		Advisory
https://jenkins.io/security/advisory/2017-07-10/		x_refsource_CONFIRMVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000088