CodeChecker Open Redirect Vulnerability Bypassing Previous Protections

An open redirect vulnerability has been identified in CodeChecker versions through 6.24.5. This issue arises from inadequate handling of multiple slashes in the URL after the product name, allowing attackers to bypass existing protections against open redirects, specifically those related to CVE-2021-28861. The vulnerability enables the creation of links that appear to be legitimate CodeChecker URLs but redirect users to malicious sites.

Impact

Exploitation of this vulnerability allows for open redirection, where users are sent to an attacker-controlled website under the guise of a legitimate CodeChecker link.

Remediation

Users can upgrade to CodeChecker version 6.24.6 or later to address this vulnerability.