Linux Distros Unpatched Vulnerability : CVE-2018-7753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Usi...

alo7-airflow (>=1.10.0 <=1.10.0.7), cateye (>=0.3.4 <=0.3.6) +1 more potentially affected by CVE-2018-7753 via bleach (>=2.1.0 <=2.1.2)

bleach PYPI version =2.1.0, =1.10.0, =0.3.4, =0.3.6 - protobuf-compiler =1.0.20 Source cves: CVE-2018-7753 Source advisory: OSV:GHSA-M9MQ-P2F9-CFQV...

Insufficient Input Validation in Bleach module in Intel® Distribution for Python (IDP) version IDP 2018 Update 2 potentially allows an unprivileged user to bypass URI sanitization and cause a Denial of Service via local vector

Summary: Insufficient Input Validation in Bleach module in Intel® Distribution for Python IDP version IDP 2018 Update 2 potentially allows an unprivileged user to bypass URI sanitization and cause a Denial of Service via local vector. Description: A vulnerable version of the Mozilla Bleach librar...

Fedora Update for python-bleach FEDORA-2018-e38f759144

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2018-7753

An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed that would slide through unsanitized...

CVE-2018-7753

Bleach 2.1.x before 2.1.3 contains a URI sanitization flaw: attributes with URI values that include character entities could bypass the allowed-scheme check, allowing a disallowed scheme to pass through unsanitized. Affected: Bleach 2.1.x (prior to 2.1.3). Impact noted across multiple advisories ...