An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.
| Software | From | Fixed in |
|---|---|---|
anki
|
- | 24.06 |
| ankiweb / anki | 24.04 | 24.04.x |