{"id":"CVE-2025-1300","aliases":["EUVD-2025-5562","GHSA-g839-x3p3-g5fm","PYSEC-2026-1259"],"status":"published","title":"Open redirect in CodeChecker web server","description":"CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. \n\nThe CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nThis issue affects CodeChecker: through 6.24.5.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00266,"percentile":0.18881,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-601"],"published":"2025-02-28T12:47:19Z","modified":"2026-10-28T02:30:28Z","fixes":[{"ecosystem":"PyPI","package":"codechecker","fixed_in":["6.24.6"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"codechecker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.24.5"},{"fixed":"6.24.6"}]}]},{"source":"osv","ecosystem":"PyPI","package":"codechecker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.24.6"}]}],"versions":["6.16.0","6.16.0a1","6.17.0","6.18.0","6.18.1","6.18.2","6.19.0","6.19.1","6.20.0","6.20.0rc1","6.21.0","6.21.0rc1","6.22.0","6.22.0rc1","6.22.1","6.22.2","6.22.2.post1","6.23.0","6.23.0rc2","6.23.1","6.24.0","6.24.1","6.24.2","6.24.4"]},{"source":"osv","ecosystem":"PyPI","package":"codechecker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.24.6"}]}],"versions":["6.16.0","6.16.0a1","6.17.0","6.18.0","6.18.1","6.18.2","6.19.0","6.19.1","6.20.0","6.20.0rc1","6.21.0","6.21.0rc1","6.22.0","6.22.0rc1","6.22.1","6.22.2","6.22.2.post1","6.23.0","6.23.0rc2","6.23.1","6.24.0","6.24.1","6.24.2","6.24.4"]}],"products":[{"vendor":"ericsson","product":"codechecker"}],"references":[{"url":"https://github.com/Ericsson/codechecker/security/advisories/GHSA-g839-x3p3-g5fm","tags":["vendor-advisory","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1300","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g839-x3p3-g5fm","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1300.json","tags":["advisory"]},{"url":"https://github.com/Ericsson/codechecker","tags":["package"]},{"url":"https://pypi.org/project/codechecker","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-1300","title":"Open redirect in CodeChecker web server","description":"CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. \n\nThe CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nThis issue affects CodeChecker: through 6.24.5.","status":"published","published":"2025-02-28T12:47:19.205Z","modified":"2025-02-28T14:39:43.357Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:32:49.503917Z"}],"euvd":[{"id":"EUVD-2025-5562","description":"CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. \n\nThe CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nThis issue affects CodeChecker: through 6.24.5.","status":"published","published":"2025-02-28T12:47:19Z","modified":"2025-02-28T14:39:43Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:19.898689Z"}],"ghsa":[{"id":"GHSA-g839-x3p3-g5fm","title":"CodeChecker open redirect when URL contains multiple slashes after the product name","description":"Summary\n---\n\nCodeChecker versions up to 6.24.5 contain an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL's path segment.  This results in bypassing protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nDetails\n---\n\nCodeChecker processes GET requests by first rewriting the path segment of the URL, and then passing the rewritten URL to the webserver framework.\nWhen trimming the product name from the URL, no sanitization was performed on the remaining URL, which reintroduced the same issue as CVE-2021-28861, leading to the same open redirect pathway using URLs such as `/Default//attacker.com/%2f..`.\n\nImpact\n---\n\nThe vulnerability allows an attacker to create a hyperlink that looks like a legitimate CodeChecker URL, but redirects to an attacker-supplied website when clicked.","status":"published","published":"2025-03-03T19:53:16Z","modified":"2025-03-03T19:53:19Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:38:33.163519Z"}],"nvd":[{"id":"CVE-2025-1300","description":"CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. \n\nThe CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nThis issue affects CodeChecker: through 6.24.5.","status":"published","published":"2025-02-28T13:15:27.043Z","modified":"2026-06-17T08:38:46.317Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:10:52.398004Z"}],"osv":[{"id":"CVE-2025-1300","title":"Open redirect in CodeChecker web server","description":"CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. \n\nThe CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nThis issue affects CodeChecker: through 6.24.5.","status":"published","published":"2025-02-28T12:47:19.205Z","modified":"2026-10-28T02:30:28.250754855Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:44:46.024537Z"},{"id":"GHSA-g839-x3p3-g5fm","title":"CodeChecker open redirect when URL contains multiple slashes after the product name","description":"Summary\n---\n\nCodeChecker versions up to 6.24.5 contain an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL's path segment.  This results in bypassing protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nDetails\n---\n\nCodeChecker processes GET requests by first rewriting the path segment of the URL, and then passing the rewritten URL to the webserver framework.\nWhen trimming the product name from the URL, no sanitization was performed on the remaining URL, which reintroduced the same issue as CVE-2021-28861, leading to the same open redirect pathway using URLs such as `/Default//attacker.com/%2f..`.\n\nImpact\n---\n\nThe vulnerability allows an attacker to create a hyperlink that looks like a legitimate CodeChecker URL, but redirects to an attacker-supplied website when clicked.","status":"published","published":"2025-03-03T19:53:16Z","modified":"2026-07-07T17:56:22.819982343Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T15:46:47.472172Z"},{"id":"PYSEC-2026-1259","title":"CodeChecker open redirect when URL contains multiple slashes after the product name","description":"Summary\n---\n\nCodeChecker versions up to 6.24.5 contain an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL's path segment.  This results in bypassing protections against CVE-2021-28861, leading to the same open redirect pathway.\n\nDetails\n---\n\nCodeChecker processes GET requests by first rewriting the path segment of the URL, and then passing the rewritten URL to the webserver framework.\nWhen trimming the product name from the URL, no sanitization was performed on the remaining URL, which reintroduced the same issue as CVE-2021-28861, leading to the same open redirect pathway using URLs such as `/Default//attacker.com/%2f..`.\n\nImpact\n---\n\nThe vulnerability allows an attacker to create a hyperlink that looks like a legitimate CodeChecker URL, but redirects to an attacker-supplied website when clicked.","status":"published","published":"2026-07-07T14:34:50.383247Z","modified":"2026-07-07T17:47:26.783433258Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:54.622769Z"}]}}