CVE-2024-26020

9.6

CRITICALCVSS v3

Published

July 22, 2024

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.

ankitects/anki

GitHubAnki is a smart spaced repetition flashcard program

= 24.04, < 24.06NVD

anki

Crates.ioThis crate is currently only available through the GitHub repo.

= 24.04, < 24.06NVD

anki

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python library for Anki, the spaced repetition flashcard program

= 24.04, < 24.06NVD

anki

RubyGemsGenerate decks ready to be imported into Anki! Just pass an array of hashes and get back a string that you can save in a file and import directly into Anki.

= 24.04, < 24.06NVD

anki

NPMhandle anki .apkg fils

= 24.04, < 24.06NVD

dennmart/anki

GitHubGenerate decks ready to be imported into Anki!

= 24.04, < 24.06NVD

Security Advisories

CVE-2024-26020

Description

More on this CVE