Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-634v-x2r3-jm25

Опубликовано: 17 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists because of an incomplete fix for CVE-2024-32484.

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists because of an incomplete fix for CVE-2024-32484.

EPSS

Процентиль: 7%
0.00029
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-830

Связанные уязвимости

CVSS3: 6.1
ubuntu
8 месяцев назад

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists because of an incomplete fix for CVE-2024-32484.

CVSS3: 6.1
nvd
8 месяцев назад

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists because of an incomplete fix for CVE-2024-32484.

CVSS3: 6.1
debian
8 месяцев назад

An issue was discovered in Ankitects Anki through 25.02. A crafted sha ...

EPSS

Процентиль: 7%
0.00029
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-830