cve/2024/CVE-2024-32152.md
2024-07-25 21:25:12 +00:00

753 B

CVE-2024-32152

Description

A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerability.

POC

Reference

No PoCs from references.

Github