CVE-2025-1300

Katalog CVE

CVSS 6.1 · Medium EPSS 0,27%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada ericsson codechecker. Skor CVSS 3.1 6.1 (Medium) menurut CNA.

Deskripsi (NVD)

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway. This issue affects CodeChecker: through 6.24.5.

Rincian

Terbit di NVD

28 Februari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Ericsson/codechecker/security/advisories/GHSA-g839-x3p3-g5fm advisory vendor