-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:sidebar-link | maven | <= 1.8 | 1.9 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from missing URL scheme validation when storing sidebar links. The security advisory explicitly states the fix involved adding scheme whitelisting to Link handling. The setUrl method in the Link class would be the direct point of unsanitized input storage, while LinkAction.addLink would be the entry point for processing user input. These functions would appear in stack traces when malicious links are processed or rendered.