← Back

CVE-2025-1300

nvd nist
Published: Feb 28, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf (Secondary)

Description

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway. This issue affects CodeChecker: through 6.24.5.

Affected (1)

Ericsson
1 product
Codechecker
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Codechecker
Before 6.24.6

Related CWEs

CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (1)

Source: 85b1779b-6ecd-4f52-bcc5-73eac4659dcf
Vendor Advisory

Timeline

No history available yet.