4.3 Medium

CVE-2023-32985 Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form…

Description

Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Sidebar Link Plugin 2.2	earliest → 2.2.1	No fix stated

Do you use Jenkins Sidebar Link Plugin?

Track this CVE Watch Jenkins Sidebar Link Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-32985

Timeline

Published May 16, 2023
Last modified January 23, 2025

References

Jenkins Security Advisory 2023-05-16 www.jenkins.io

Track this CVE