Authentication Bypass Using an Alternate Path or Channel Affecting codechecker package, versions [,6.24.2)
Threat Intelligence
Exploit Maturity
Proof of concept
EPSS
0.04% (11th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-CODECHECKER-8344800
- published 6 Nov 2024
- disclosed 6 Nov 2024
- credit Discookie
Introduced: 6 Nov 2024
New CVE-2024-10081 Open this link in a new tabHow to fix?
Upgrade codechecker to version 6.24.2 or higher.
Overview
codechecker is an analyzer tooling, defect database and viewer extension
Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to improperly parsing the endpoint path, which allows bypassing authentication on all but the /Authentication endpoint. An attacker can gain superuser access to these endpoints to query, add, edit, and delete products.