CVE-2024-26020
EUVD-2024-230922.07.2024, 15:15
An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ankiweb | anki | 24.04 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| ankitects | anki | 24.4 | CNA |
Ubuntu Releases