TI-2024-21378 CVE-2024-32484 · GHSA-r6f4-5657-3fp7
Cross-site scripting in Ankitects Anki
Priority HIGH 69
An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04.
Ankitects
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Ankitects records in CISA KEVNo Ankitects vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Anki · all components
TI-2024-21226 CVE-2024-32152 · GHSA-q47p-v5rw-v574
A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki…
Priority MEDIUM 53
A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04.
TI-2025-38504 CVE-2025-62186 · GHSA-jjrh-4jr8-87g7
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute…
Priority LOW 33
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling.
TI-2025-38503 CVE-2025-62185 · GHSA-j6hh-cgvw-j237
Uncontrolled search path in Ankitects Anki
Priority LOW 33
In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link in the deck.
TI-2025-28297 CVE-2025-43703 · GHSA-634v-x2r3-jm25
An issue was discovered in Ankitects Anki through 25.02.
Priority LOW 27
An issue was discovered in Ankitects Anki through 25.02.
TI-2025-38505 CVE-2025-62187 · GHSA-cvrh-qggv-7gf8
Path traversal in Ankitects Anki
Priority LOW 15
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux (media file pathnames are not necessarily relative to the media folder).