Medium severity6.1NVD Advisory· Published Apr 16, 2025· Updated Jun 17, 2026
CVE-2025-43703
CVE-2025-43703
Description
An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists because of an incomplete fix for CVE-2024-32484.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/ankitects/anki/pull/3925nvdIssue TrackingPatch
- github.com/ankitects/anki/pull/3925/commits/24bca15fd3d9dc386916509eb2d4862d1184e709nvdPatch
News mentions
0No linked articles in our index yet.