Cross-site Scripting in Ericsson CodeChecker
Moderate severity
GitHub Reviewed
Published
Jan 21, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 18, 2022
Reviewed
Jan 19, 2022
Published to the GitHub Advisory Database
Jan 21, 2022
Last updated
Feb 3, 2023
In Ericsson CodeChecker prior to 6.18.2, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.
References