Skip to content
OpenAdvisories

Product · Ericsson

CodeChecker

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2024-53829

    Cross-Site Request Forgery in CodeChecker API

    CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Cross-site request forgery allows an unauthenticated attacker to hijack the authentication of a logged in user, and use the web API with the…

    Ericsson CodeChecker codechecker PyPI
  • High 8.7
    CVE-2024-10082

    codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service

    CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows logging in as the built-in root user from an external service. The built-in root user up until 6.24.1…

    Ericsson CodeChecker codechecker PyPI