CVE-2025-62186

概要

参考情報

• ankitects/anki release 25.02.5 · Release Notes

anki のその他の脆弱性

• CVE-2025-62187低 3.3In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux …
• CVE-2025-62185高 7.8In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed …
• CVE-2025-43703中 5.4An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API …
• CVE-2024-32484高 8.2An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A specially crafted flas…
• CVE-2024-32152中 4.3A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead…