Vulnetix
Try Vulnetix Request Demo
CVE-2018-7753 PUBLISHED

An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.

EPSS 0.51% · 66.3th percentile

Risk Scores

EPSS Score
0.51%
66.3th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSpython-bleach0, 1.4-1, 1.4.2-1
Ubuntu:18.04:LTSpython-bleach0, 2.0-1, 2.1.2-1

Timeline

References

Open in Interactive Console →