CVE-2024-32484

7.4

HIGHCVSS v3

Published

July 22, 2024

Affected

6 projects

Assigned by

[email protected]

Severity scale

010

Description

An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A specially crafted flashcard can lead to JavaScript code execution and result in an arbitrary file read. An attacker can share a malicious flashcard to trigger this vulnerability.

ankitects/anki

GitHubAnki is a smart spaced repetition flashcard program

= 24.04NVD

anki

Crates.ioThis crate is currently only available through the GitHub repo.

= 24.04NVD

anki

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Python library for Anki, the spaced repetition flashcard program

= 24.04NVD

anki

RubyGemsGenerate decks ready to be imported into Anki! Just pass an array of hashes and get back a string that you can save in a file and import directly into Anki.

= 24.04NVD

anki

NPMhandle anki .apkg fils

= 24.04NVD

dennmart/anki

GitHubGenerate decks ready to be imported into Anki!

= 24.04NVD

Security Advisories

CVE-2024-32484

Description

More on this CVE