| Package | Affected versions | Patched versions |
|---|---|---|
| codechecker | < 6.18.2 | 6.18.2 |
| codechecker | ≤ 6.18.0 |
In Ericsson CodeChecker prior to 6.18.2, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free