CVE-2023-49793CWE-22

Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`

Medium · published June 24, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of `CodeChecker store` are not properly sanitized. An attacker, using a path traversal attack, can load and display files on the machine of `CodeChecker server`. The vulnerable endpoint is `/Default/v6.53/CodeCheckerService@massStoreRun`. The path traversal vulnerability allows reading data on the machine of the `CodeChecker server`, with the same permission level as the `CodeChecker server`.

The attack requires a user account on the `CodeChecker server`, with permission to store to a server, and view the stored report. This vulnerability has been patched in version 6.23.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00730 · 53.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-06-24T17:36Z
EPSS history
Timeline
  • 24 JUN 17:36Z
    Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
    cvelistv5