Open Redirect in Ericsson Codechecker
CVE-2025-1300
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes…
Vulnerability class: Open Redirect
EPSS: 0.001 (31.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Ericsson Codechecker — versions 0
Weakness classification (CWE)
References
- github.com/Ericsson/codechecker/security/advisories/GHSA-g839-x3p3-g5fm (vendor-advisory)
Frequently asked questions
- What is CVE-2025-1300?
- CVE-2025-1300 is a medium-severity vulnerability in Ericsson Codechecker, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2025-02-28.
- How severe is CVE-2025-1300?
- Medium severity. CVSS v3 base score is 6.1 out of 10.