CVE-2020-18703

CVE-2020-18703 relates to an XML External Entities (XXE) vulnerability in Quokka v0.4.0, exploitable via the file path component quokka/utils/atom.py . The connected documents consistently identify XXE in that module as the root cause, enabling a remote attacker to execute arbitrary code. Reporte...

CVE-2020-18702

The CVE-2020-18702 entry concerns a Cross Site Scripting (XSS) vulnerability in Quokka v0.4.0. Affected element is the quokka/admin/actions.py component, where the Username parameter can be exploited to execute arbitrary code on the remote attacker’s side. The collected connected documents consis...

CVE-2020-18702

Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...

Quokka代码问题漏洞

Quokka is a content management framework written in Python. quokka version 0.4.0 is vulnerable to XML external entity injection. A remote attacker can exploit this vulnerability to execute arbitrary code via the quokka/utils/atom.py component...

Quokka代码问题漏洞

Quokka is a content management framework written in Python. quokka version 0.4.0 is vulnerable to XML external entity injection. A remote attacker can exploit this vulnerability to execute arbitrary code via the quokka/core/content/views.py component...

Quokka跨站脚本漏洞

Quokka is a content management framework written in Python. version 0.4.0 of Quokka is vulnerable to a cross-site scripting vulnerability. An attacker can exploit the vulnerability to execute arbitrary code via the Username parameter in the quokka/admin/actions.py component...