Path Traversal

Jenkins Sidebar Link Plugin is vulnerable to Path Traversal. The vulnerability exists because the path of files are not properly restricted which allows an attacker to access the userContent/ directory and check for the existence of a specific file...

Jenkins Sidebar Link Plugin vulnerable to Path Traversal

Jenkins Sidebar Link Plugin allows specifying files in the userContent/ directory for use as link icons. Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation. This allows attackers with Overall/Read permission to check for the existenc...