Quokka@0.4.0 Security Vulnerabilities and Issues — Quokka@0.4.0 CVE List

Lucene search

Quokka ProjectQuokka0.4.0

3 matches found

CVE•added 2021/08/16 6:15 p.m.•66 views

CVE-2020-18702

Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'.

6.1CVSS6.2AI score0.00405EPSS

CVE•added 2021/08/16 6:15 p.m.•57 views

CVE-2020-18703

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.

9.8CVSS9.7AI score0.02571EPSS

CVE•added 2021/08/16 6:15 p.m.•53 views

CVE-2020-18705

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

9.8CVSS9.7AI score0.02571EPSS