Lucene search
China National Vulnerability DatabaseCNVD-2021-94927HistoryAug 17, 2021 - 12:00 a.m.
Quokka XML External Entity Injection Vulnerability (CNVD-2021-94927)
2021-08-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
quokka
xml
external entity injection
vulnerability
python
content management
remote attacker
arbitrary code
cnvd-2021-94927
EPSS
0.007
Percentile
79.9%
Quokka is a content management framework written in Python. quokka version 0.4.0 is vulnerable to XML external entity injection. A remote attacker can exploit this vulnerability to execute arbitrary code via the quokka/utils/atom.py component.
Related
osv
osv
CVE-2020-18703
2021-08-16 18:15:07
PYSEC-2021-144
2021-08-16 18:15:00
Improper Restriction of XML External Entity Reference in Quokka
2021-08-30 16:23:34
nvd
nvd
CVE-2020-18703
2021-08-16 18:15:07
cvelist
cvelist
CVE-2020-18703
2021-08-16 17:55:55
github
github
Improper Restriction of XML External Entity Reference in Quokka
2021-08-30 16:23:34
cve
cve
CVE-2020-18703
2021-08-16 18:15:07
prion
prion
Xxe
2021-08-16 18:15:00