CVE-2018-7753 Bleach URI Scheme Restriction Bypass
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi bleach(PyPI) | >= 2.1.0, < 2.1.3 | 2.1.3 |
| pypi bleach(PyPI) | = 2.1 | No fix listed |
| pypi bleach(PyPI) | = 2.1.1 | No fix listed |
| pypi bleach(PyPI) | = 2.1.2 | No fix listed |
| pypi bleach(PyPI) | >= 2.1, < 2.1.3 | 2.1.3 |
| debian/python-bleach(Debian:12) | < 2.1.3-1 | 2.1.3-1 |
| debian/python-bleach(Debian:13) | < 2.1.3-1 | 2.1.3-1 |
| debian/python-bleach(Debian:14) | < 2.1.3-1 | 2.1.3-1 |
| mozilla bleach | = 2.1 | No fix listed |
| mozilla bleach | = 2.1.1 | No fix listed |
| mozilla bleach | = 2.1.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- bugs.debian.org issue-tracking third-party-advisory
- github.com product
- github.com third-party-advisory
- github.com
- github.com vendor-advisory
- Debian Security Tracker CVE-2018-7753 vendor-advisory