Vendors / Quokka Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 0
Exploited now Quokka Project records in CISA KEV No Quokka Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02771 · Published 2021-08-16 · No fix listed CWE-611
Priority MEDIUM 47
XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02771 · Published 2021-08-16 · No fix listed CWE-611
Priority LOW 30
Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01312 · Published 2021-08-16 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 0 1 0 0
