CVE-2025-43703

Name: CVE-2025-43703
Creator: NVD / NIST
Published: 2025-04-16T22:15:15.083+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.4/10EPSS 0.19%

Last modified Jun 17, 2026

CVE-2025-43703 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. EPSS estimates a 0.19% chance of exploitation in the next 30 days.

Description

An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the attacker has no knowledge of an API key) through approaches such as scripts or the SRC attribute of an IMG element. NOTE: this issue exists because of an incomplete fix for CVE-2024-32484.

Metrics

CVSS 3.1

5.4/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS Probability

0.19%

9.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-830

Affected Software

Vendor	Product	Versions
Ankitects	Anki	<= 25.02

References

https://github.com/ankitects/anki/pull/3925Issue Tracking, Patch
https://github.com/ankitects/anki/pull/3925/commits/24bca15fd3d9dc386916509eb2d4862d1184e709Patch

Timeline

Published: Apr 16, 2025
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2025-43703?

How severe is CVE-2025-43703?

CVE-2025-43703 has a CVSS score of 5.4/10 (MEDIUM severity). The EPSS model estimates a 0.19% probability of exploitation in the next 30 days.

How do I fix CVE-2025-43703?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-43703?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST