{"id":"CVE-2017-1000088","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-1000088","generatedAt":"2026-10-28T20:26:38.470Z","title":"The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects.","description":"The Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input validation, which meant users were able to use javascript: schemes for these links.","published":"2017-10-05T01:29:04.000Z","lastModified":"2026-06-17T00:58:43.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},"cwe":["CWE-79"],"affected":["jenkins/sidebar link"],"epss":{"score":0.00705,"percentile":0.53158,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.70%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://jenkins.io/security/advisory/2017-07-10/","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://jenkins.io/security/advisory/2017-07-10/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000088","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}