Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists because of an incomplete fix for CVE-2024-32484.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 Anki (aqt), Path Traversal via iframe Scripts, #CVE-2025-43703 (Medium) -DC-Jun2026-535 https://dailycve.com/anki-aqt-path-traversal-via-iframe-scripts-cve-2025-43703-medium-dc-jun2026-535/
Post summary
The text announces a medium‑severity path traversal vulnerability in Anki (aqt), CVE‑2025‑43703, with technical details provided but no PoC, exploit code, or patch mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ankitects | anki | - | - | - |