Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-26020

Опубликовано: 22 июл. 2024
Источник: debian
EPSS Низкий

Описание

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
ankiremovedpackage
ankipostponedbullseyepackage

Примечания

  • https://talosintelligence.com/vulnerability_reports/TALOS-2024-1993

EPSS

Процентиль: 86%
0.03111
Низкий

Связанные уязвимости

CVSS3: 9.6
ubuntu
больше 1 года назад

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.

CVSS3: 9.6
nvd
больше 1 года назад

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.

CVSS3: 9.6
github
больше 1 года назад

Ankitects Anki arbitrary script execution vulnerability

EPSS

Процентиль: 86%
0.03111
Низкий