Description
An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9Attack Vector: Network
Complexity: Low
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High
Affected Packages4 packages
🔴Vulnerability Details
5OSVpython-bleach vulnerabilities↗2026-03-05 GHSABleach URI Scheme Restriction Bypass↗2019-01-04 OSVBleach URI Scheme Restriction Bypass↗2019-01-04 OSVCVE-2018-7753: An issue was discovered in Bleach 2↗2018-03-07 CVEListCVE-2018-7753: An issue was discovered in Bleach 2↗2018-03-07 💥Exploits & PoCs
1Exploit-DBNewMark CMS 2.1 - 'sec_id' SQL Injection↗2018-06-20 📋Vendor Advisories
2UbuntuBleach vulnerabilities↗2026-03-05 DebianCVE-2018-7753: python-bleach - An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI v...↗2018 💬Community
2BugzillaCVE-2018-7753 python-bleach: URI Scheme Restriction Bypass with character entities [fedora-26]↗2018-03-19 BugzillaCVE-2018-7753 python-bleach: URI Scheme Restriction Bypass with character entities↗2018-03-19