CVE-2018-7753
python3-bleach: An issue was discovered in Bleach 2.1.x before 2.1.3
CVE-2018-7753 is fixed in 2 products on 1 platform, first by python-bleach 2.1.2-1ubuntu0.1~esm1, released February 16, 2023. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0217
82nd percentile
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| python-bleach · Ubuntu 18.04.6 LTS (bionic) | 2.1.2-1ubuntu0.1~esm1 | python-bleach 2.1.2-1ubuntu0.1~esm1 | Feb 16, 2023 |
| python3-bleach · Ubuntu 18.04.6 LTS (bionic) | 2.1.2-1ubuntu0.1~esm1 | python3-bleach 2.1.2-1ubuntu0.1~esm1 | Feb 16, 2023 |