TI-2023-27200 Aliases CVE-2023-49793 GHSA-h26w-r4m5-8rrf

Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`

MEDIUM 62CWE-22Published 2024-06-24 · Updated 2024-08-02

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-22 and the CVSS impact.

Summary

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of `CodeChecker store` are not properly sanitized. An attacker, using a path traversal attack, can load and display files on the machine of `CodeChecker server`. The vulnerable endpoint is `/Default/v6.53/CodeCheckerService@massStoreRun`. The path traversal vulnerability allows reading data on the machine of the `CodeChecker server`, with the same permission level as the `CodeChecker server`. The attack requires a user account on the `CodeChecker server`, with permission to store to a server, and view the stored report. This vulnerability has been patched in version 6.23.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.0073 54th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed codechecker (Ericsson): 6.23.0codechecker (PyPI): 6.23.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Ericsson	codechecker	before 6.23.0	6.23.0	Patch available	CNA
—	codechecker (PyPI)	before 6.23.0	6.23.0	Patch available	GHSA-h26w-r4m5-8rrf

codechecker VendorEricsson Affected before 6.23.0 Fixed in 6.23.0 Patch available CNA
codechecker (PyPI) Vendor— Affected before 6.23.0 Fixed in 6.23.0 Patch available GHSA-h26w-r4m5-8rrf

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:ericsson:codechecker::::::::	before 6.23.0	Vulnerable	Ericsson

cpe:2.3:a:ericsson:codechecker:*:*:*:*:*:*:*:* Versions before 6.23.0 Vulnerable ·Ericsson

Remediation

Fix · CNA codechecker (Ericsson) Fixed in 6.23.0
Fix · GHSA-h26w-r4m5-8rrf codechecker (PyPI) Fixed in 6.23.0 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2023-49793
2026-10-03 Alias added: GHSA-h26w-r4m5-8rrf

References

Other 2

TI-2024-09344 Authentication bypass in Ericsson CodeChecker CVSS 3.1CRITICAL 10.0
TI-2024-36027 Cross-Site Request Forgery in CodeChecker API CVSS 3.1HIGH 8.2
TI-2025-27277 Buffer overflow in CodeChecker log command CVSS 3.1HIGH 7.8
TI-2026-20759 Authentication bypass for certain API calls CVSS 4.0CRITICAL 9.3
TI-2024-09345 Authentication bypass in Ericsson CodeChecker CVSS 3.1CRITICAL 9.0
TI-2021-19910 In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability… CVSS 3.1MEDIUM 6.1

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences