Lucene search

K

Quokka Project Security Vulnerabilities

cve

Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'.

6.1CVSS

6.2AI Score

0.001EPSS

2021-08-16 06:15 PM

49

cve

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.

9.8CVSS

9.7AI Score

0.006EPSS

2021-08-16 06:15 PM

48

4

cve

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

9.8CVSS

9.7AI Score

0.006EPSS

2021-08-16 06:15 PM

44