CVE-2021-44217

Ericsson CodeChecker up to version 6.18.0 contains a stored XSS in the comments component of the reports viewer, exploitable via POST JSON data to the /CodeCheckerService API. This allows remote attackers to inject arbitrary web script or HTML. Related advisories indicate a fix was issued in or a...

CVE-2025-1300

CVE-2025-1300 — Open redirect in CodeChecker web server . The issue is in the CodeChecker web server where insufficient protection against multiple slashes after the product name in the URL allows an open redirect, bypassing protections related to CVE-2021-28861. Affected software is CodeChecker ...

CVE-2023-49793

CVE-2023-49793 describes a path traversal in CodeChecker server via the massStoreRun endpoint (CodeCheckerService). ZIPs uploaded to CodeChecker store are not sanitized, allowing reading files from the server with the same permissions as the CodeChecker server. Attack requires a CodeChecker user ...