NetSight
critical9.8

CVE-2020-18705

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

Impact

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

Affected products

VendorProductAffected versions
Quokka ProjectQuokka
Version 0.4.0

Weakness classification

References