Jenkins Sidebar Link Plugin 目录遍历漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://plugins.jenkins.io/sidebar-link/releases/
• https://plugins.jenkins.io/sidebar-link/
• https://github.com/jenkinsci/sidebar-link-plugin
• https://www.jenkins.io/security/advisory/2023-05-16/
• https://nvd.nist.gov/vuln/detail/cve-2023-32985
• https://github.com/advisories/GHSA-pp8m-prr7-wr8w
• https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/sidebar-link/CVE-2023-32985/
• https://wlfw.zepc.edu.cn/info/1712/34102.htm
• https://cve.imfht.com/product/Jenkins%20Sidebar%20Link%20Plugin
• https://docs.cloudbees.com/plugins/ci/sidebar-link

Related Vulnerabilities

• PoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal
• Jenkins 代码执行漏洞（CVE-2026-84645）
• JeecgBoot 积木报表 /jmreport/auto/export/python/plugin 代码执行漏洞
• PoCCVE-2025-14998: Branda WordPress plugin - Privilege Escalation
• PoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCE
• PoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization
• PoCCVE-2026-3001: Gutenverse Plugin <= 3.4.6 - Cross-Site Scripting
• PoCCVE-2025-6389: Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func
• PoCCVE-2026-3296: Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection
• Stripe Payment Plugin for WooCommerce /wc-api/WT_Stripe/ SQL 注入漏洞（CVE-2024-0705）
• Jenkins /view 文件读取漏洞（CVE-2026-53435）
• 泛微 E-Cology /hrm/hrm_e9/orgChart/js/jquery/plugins/jqueryFileTree/connectors/jqueryFileTree.jsp 目录遍历漏洞
• AVideo /plugin/API/get.json.php 文件包含漏洞（CVE-2026-33513）