Lucene search
China National Vulnerability DatabaseCNVD-2021-94928HistoryAug 17, 2021 - 12:00 a.m.
Quokka XML External Entity Injection Vulnerability
2021-08-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.006 Low
EPSS
Percentile
79.1%
Quokka is a content management framework written in Python. quokka version 0.4.0 is vulnerable to XML external entity injection. A remote attacker can exploit this vulnerability to execute arbitrary code via the quokka/core/content/views.py component.
| CPE | Name | Operator | Version |
|---|---|---|---|
| quokka quokka | eq | 0.4.0 |
Related
nvd
nvd
CVE-2020-18705
2021-08-16 18:15:07
cvelist
cvelist
CVE-2020-18705
2021-08-16 17:56:14
prion
prion
Xxe
2021-08-16 18:15:00
osv
osv
Improper Restriction of XML External Entity Reference in Quokka
2021-08-30 16:25:18
CVE-2020-18705
2021-08-16 18:15:07
PYSEC-2021-145
2021-08-16 18:15:00
cve
cve
CVE-2020-18705
2021-08-16 18:15:07
cnvd
cnvd
Quokka has an unspecified vulnerability
2021-08-18 00:00:00
github
github
Improper Restriction of XML External Entity Reference in Quokka
2021-08-30 16:25:18