CVE-2020-18705

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-08-16

Last modified

2024-08-04

Weaknesses

CWE-611

Affected products

• Quokka (Quokka Project)

References

• https://github.com/rochacbruno/quokka/issues/676