CVE-2020-18703

CRITICAL9.8EPSS 2.6%

Improper Restriction of XML External Entity Reference in Quokka

Published: 8/30/2021Modified: 10/16/2024
Also known as:GHSA-3xg5-6c3j-vp8xPYSEC-2021-144

Description

XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.

Affected packages (2)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (5)