CVE-2018-7753

moderate-risk
Published 2018-03-07

An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.

Do I need to act?

-
0.51% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: c5df5789ec3471a31311f42c2d19fc2cf21b35ef, 9584f42051c0039cb0f27a617e8ab3e945018cc6
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (3)

Bleach
Bleach
Bleach

Affected Vendors

Mozilla

References (6)

Third Party Advisory https://bugs.debian.org/892252
Patch https://github.com/mozilla/bleach/commit/c5df5789ec3471a31311f42c2d19fc2cf21b35e...
Third Party Advisory https://github.com/mozilla/bleach/releases/tag/v2.1.3
Third Party Advisory https://bugs.debian.org/892252
Patch https://github.com/mozilla/bleach/commit/c5df5789ec3471a31311f42c2d19fc2cf21b35e...
Third Party Advisory https://github.com/mozilla/bleach/releases/tag/v2.1.3
43
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 2/34 · Minimal
Exposure 9/34 · Low