Vulnerabilities

TI-2020-13445 CVE-2020-18705 · GHSA-4q2r-qxp6-h5j6

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary…

MEDIUM 47

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02771 Published 2021-08-16 No fix listed CWE-611

TI-2020-13443 CVE-2020-18703 · GHSA-3xg5-6c3j-vp8x

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary…

MEDIUM 47

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02771 Published 2021-08-16 No fix listed CWE-611

TI-2020-13442 CVE-2020-18702 · GHSA-5m69-3chg-6f8m

Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary…

LOW 30

Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01312 Published 2021-08-16 No fix listed CWE-79

Vulnerabilities

Filters

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary…

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary…

Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary…