CVE-2023-49793

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of CodeChecker store are not properly sanitized. An attacker, using a path traversal attack, can load and display files on the machine o...

PT-2024-13801

Name of the Vulnerable Software and Affected Versions CodeChecker versions prior to 6.23 Description The issue arises from the improper sanitization of ZIP files uploaded to the server endpoint of CodeChecker store. An attacker can exploit this vulnerability using a path traversal attack to load...