Lucene search
K

Quokka代码问题漏洞

🗓️ 16 Aug 2021 00:00:00Reported by China National Vulnerability Database of Information SecurityType 
cnnvd
 cnnvd
🔗 www.cnnvd.org.cn👁 2 Views

Quokka content management framework version 0.4.0 is vulnerable to XML external entity injection enabling remote code execution via quokka/utils/atom.py.

Related
Refs
ReporterTitlePublishedViews
Family
CNVD
Quokka XML External Entity Injection Vulnerability (CNVD-2021-94927)
17 Aug 202100:00
cnvd
CVE
CVE-2020-18703
16 Aug 202117:55
cve
Cvelist
CVE-2020-18703
16 Aug 202117:55
cvelist
EUVD
EUVD-2021-0218
7 Oct 202500:30
euvd
Github Security Blog
Improper Restriction of XML External Entity Reference in Quokka
30 Aug 202116:23
github
NVD
CVE-2020-18703
16 Aug 202118:15
nvd
OSV
GHSA-3XG5-6C3J-VP8X Improper Restriction of XML External Entity Reference in Quokka
30 Aug 202116:23
osv
OSV
PYSEC-2021-144
16 Aug 202118:15
osv
Prion
Xxe
16 Aug 202118:15
prion
PyPA
PYSEC-2021-144
16 Aug 202118:15
pypa
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 May 2026 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS 27.5
CVSS 3.19.8
EPSS0.02571
2