CVE-2025-1300CWE-601

Open redirect in CodeChecker web server

Medium · published February 28, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
17.8
In the wild
Unconfirmed
What it is

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.

This issue affects CodeChecker: through 6.24.5.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.8th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2025-02-28T12:47Z
EPSS history
Timeline
  • 28 FEB 12:47Z
    Open redirect in CodeChecker web server
    cvelistv5