Skip to content
OpenAdvisories

Package · PyPI

quokka

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2020-18705

    Improper Restriction of XML External Entity Reference in Quokka

    XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

    quokka PyPI
  • Critical 9.8
    CVE-2020-18703

    Improper Restriction of XML External Entity Reference in Quokka

    XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.

    quokka PyPI
  • Medium 6.1
    CVE-2020-18702

    Cross Site Scripting (XSS) in Quokka

    Cross Site Scripting (XSS) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'.

    quokka PyPI