CVEvulnerability

CVE-2025-1300

6.1 MEDIUM Published 2025-02-28 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-28
Last modified
2026-06-17
Assigner
85b1779b-6ecd-4f52-bcc5-73eac4659dcf
CVSS 3.1 (85b1779b-6ecd-4f52-bcc5-73eac4659dcf)
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601

Description

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway. This issue affects CodeChecker: through 6.24.5.

Affected configurations

• ericsson codechecker (< 6.24.6)

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References