CVE-2023-49793 Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`
An authenticated attacker can exploit path traversal in CodeChecker server to read arbitrary files from the host system.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-49793?
CVE-2023-49793 is a medium-severity path traversal vulnerability in Ericsson codechecker, published on 24 Jun 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of `CodeChecker store` are not properly sanitized. An attacker, using a path traversal attack, can load and display files on the machine of `CodeChecker server`. The vulnerable endpoint is `/Default/v6.53/CodeCheckerService@massStoreRun`. The path traversal vulnerability allows reading data on the machine of the `CodeChecker server`, with the same permission level as the `CodeChecker server`. The attack requires a user account on the `CodeChecker server`, with permission to store to a server, and view the stored report. This vulnerability has been patched in version 6.23.
Weakness: CWE-22
Which versions are affected by CVE-2023-49793?
3 open source packages ship an affected version, including codechecker. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
codechecker PyPI | All versions | 6.23.0 |
codechecker PyPI | All versions | 6.23.0 |
codechecker PyPI | All versions | 6.23.0 |
Products include Ericsson Codechecker.
How do I fix CVE-2023-49793?
Upgrade codechecker to 6.23.0 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2023-49793 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-49793 exists.
Other vulnerabilities in Ericsson codechecker
- CVE-2024-10081 codechecker vulnerable to authentication bypass when using specifically crafted URLs
- CVE-2026-25660 Authentication bypass for certain API calls
- CVE-2024-10082 codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service
- CVE-2024-53829 Cross-Site Request Forgery in CodeChecker API
- CVE-2025-1300 Open redirect in CodeChecker web server
Sources
Also known as GHSA-h26w-r4m5-8rrf, PYSEC-2024-54.