← Vulnerability feed

Vulnerability record · CVE-2023-32985 · published 16 May 2023

CVE-2023-32985: Jenkins Sidebar Link Plugin path traversal in form validation

Jenkins · Sidebar Link

Jenkins Sidebar Link Plugin 2.2.1 and earlier fails to restrict the file path used in a form validation method, creating a path traversal issue (CWE-22). An attacker with Overall/Read permission can probe the Jenkins controller file system for the existence of arbitrary attacker-specified paths.

4.3 CVSS 3.1 Medium EPSS 72% · top 0.6% CWE-22 · Path traversal
4.3CVSS 3.1 base score
72%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: high.

medium priorityThe flaw is limited to file existence disclosure and requires authenticated Overall/Read access, but the high EPSS score warrants prompt patching.

What it is

Jenkins Sidebar Link Plugin 2.2.1 and earlier fails to restrict the file path used in a form validation method, creating a path traversal issue (CWE-22). An attacker with Overall/Read permission can probe the Jenkins controller file system for the existence of arbitrary attacker-specified paths.

Impact

The attacker gains a limited information disclosure: confirmation of whether a given file path exists on the Jenkins controller. No file contents, modification, or code execution are indicated by the record.

Attack surface

Reachable over the network through the plugin's form validation endpoint, per the CVSS vector AV:N. It requires authenticated access with Overall/Read permission (PR:L) and no user interaction (UI:N).

Exploitation

Not listed in CISA KEV and no public exploit tags appear in the references, which are vendor advisories only. EPSS is high (0.72358, 99.4th percentile), suggesting elevated predicted exploitation activity despite the absence of confirmed in-the-wild use.

What to do

  • Upgrade Jenkins Sidebar Link Plugin to a version later than 2.2.1 as directed by the vendor advisory SECURITY-3125.
  • If upgrading is not immediately possible, disable or remove the Sidebar Link Plugin.
  • Restrict Overall/Read permission to trusted users only, since the flaw requires that permission.
  • Review Jenkins controller file system permissions so that path existence checks reveal as little as possible.
  • Monitor the vendor advisory for updated fixed versions.

Detection

  • Review Jenkins audit logs for requests to the Sidebar Link Plugin form validation endpoint containing path traversal sequences such as ../.
  • Alert on form validation requests from accounts with Overall/Read permission that reference absolute or unusual file paths.
  • Correlate repeated validation requests probing different paths from the same account or source IP.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3125 Vendor Advisory
https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3125 Vendor Advisory

Track CVE-2023-32985 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.4CVE-2017-1000088Jenkins sidebar link cross-site scripting vulnerabilityThe Sidebar Link plugin allows users able to configure jobs, views, and agents to add entries to the sidebar of these objects. There was no input val…EPSS 0.71%9.8CVE-2026-93616Checkpoint multi-domain security management path traversal vulnerabilityA directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Managem…KEVEPSS 20%10.0CVE-2026-85706GitLab CE/EE repository commits API path traversal allows unauthenticated file readGitLab CE/EE contains improper path confinement and missing authentication enforcement in the repository commits API, allowing an unauthenticated use…KEVEPSS 91%analysed5.3CVE-2026-66384JFrog Artifactory path traversal in Docker cache pathAn authenticated user can write data outside the intended Docker cache path under specific remote-repository conditions in JFrog Artifactory. The fla…KEVEPSS 0.66%analysed9.8CVE-2026-59310VMware vCenter Syslog server path traversal leads to RCEVMware vCenter's Syslog server is affected by a directory traversal flaw (CWE-22) that allows a remote, unauthenticated attacker to execute arbitrary…KEVEPSS 2.6%analysed10.0CVE-2026-48282Adobe ColdFusion path traversal leads to remote code executionColdFusion versions 2025.9, 2023.20 and earlier contain a path traversal flaw (CWE-22) that allows an unauthenticated remote attacker to reach files …KEVEPSS 42%analysed10.0CVE-2026-34909UniFi OS path traversal allows unauthenticated file accessUniFi OS devices contain a path traversal flaw (CWE-22) that lets a network-reachable attacker read files on the underlying system. Because the expos…KEVEPSS 1.8%analysed6.5CVE-2026-20262Cisco Catalyst SD-WAN Manager path traversal in file uploadCisco Catalyst SD-WAN Manager (formerly vManage) fails to properly validate user-supplied input during a file upload process, allowing path traversal…KEVEPSS 28%analysed

Source: NIST National Vulnerability Database (record CVE-2023-32985), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.