Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q47p-v5rw-v574

Опубликовано: 22 июл. 2024
Источник: github
Github: Прошло ревью
CVSS4: 2.3
CVSS3: 3.1

Описание

Ankitects Anki LaTeX Blocklist Bypass vulnerability

A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerability.

Пакеты

Наименование

anki

pip
Затронутые версииВерсия исправления

< 24.6

24.6

EPSS

Процентиль: 49%
0.00261
Низкий

2.3 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-184

Связанные уязвимости

CVSS3: 3.1
ubuntu
больше 1 года назад

A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerability.

CVSS3: 3.1
nvd
больше 1 года назад

A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerability.

CVSS3: 3.1
debian
больше 1 года назад

A blocklist bypass vulnerability exists in the LaTeX functionality of ...

EPSS

Процентиль: 49%
0.00261
Низкий

2.3 Low

CVSS4

3.1 Low

CVSS3

Дефекты

CWE-184