Podatność CVE-2024-32484
Publikacja: 2024-07-22

Opis:
An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A specially crafted flashcard can lead to JavaScript code execution and result in an arbitrary file read. An attacker can share a malicious flashcard to trigger this vulnerability.

Typ:

CWE-80

 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS))

 Referencje:
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1995
Copyright 2024, cxsecurity.com

 

Back to Top