CVE-2025-1300: Open redirect in CodeChecker web server
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.
The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.
This issue affects CodeChecker: through 6.24.5.
Other sources
Summary ---
CodeChecker versions up to 6.24.5 contain an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL's path segment. This results in bypassing protections against CVE-2021-28861, leading to the same open redirect pathway.
Details ---
CodeChecker processes GET requests by first rewriting the path segment of the URL, and then passing the rewritten URL to the webserver framework. When trimming the product name from the URL, no sanitization was performed on the remaining URL, which reintroduced the same issue as CVE-2021-28861, leading to the same open redirect pathway using URLs such as /Default//attacker.com/%2f...
Impact ---
The vulnerability allows an attacker to create a hyperlink that looks like a legitimate CodeChecker URL, but redirects to an attacker-supplied website when clicked.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1300?
CVE-2025-1300 has a medium severity rating due to its potential for open redirect attacks.
How do I fix CVE-2025-1300?
To fix CVE-2025-1300, upgrade CodeChecker to version 6.24.6 or later.
What software is affected by CVE-2025-1300?
CVE-2025-1300 affects CodeChecker versions up to and including 6.24.5.
What does the open redirect vulnerability in CVE-2025-1300 allow an attacker to do?
The open redirect vulnerability in CVE-2025-1300 allows attackers to redirect users to potentially malicious websites.
Is CVE-2025-1300 exploitable in a production environment?
Yes, CVE-2025-1300 is exploitable in a production environment if the URL redirection feature is utilized.