CVE-2020-18705 - XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'

CRITICAL

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'

Published Aug 16, 2021

9.8

CRITICAL

CVSS 3.1

EPSS 2.77%

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/core/content/views.py'.

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

Link	Providers	Tags
https://github.com/advisories/GHSA-4q2r-qxp6-h5j6		Advisory
https://github.com/pypa/advisory-database/tree/main/vulns/quokka/PYSEC-2021-145.yaml
https://github.com/quokkaproject/quokka/pull/679
https://github.com/rochacbruno/quokka/issues/676		x_refsource_MISCExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-18705