CVE-2020-18705

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...

CVE-2020-18705

XML External Entities XXE in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'...

CVE-2020-18705

CVE-2020-18705 describes an XML External Entities (XXE) vulnerability in Quokka v0.4.0, exploitable through the quokka/core/content/views.py component which could allow a remote attacker to execute arbitrary code. The issue is documented across multiple sources (NVD, RH, OSV, CNVD, GHSA) as XXE i...