{"action":"Upgrade codechecker to 6.24.2 or later.","affected":[{"fixed":"6.24.2","introduced":"0"}],"component":"codechecker","cve_ids":["CVE-2024-10081"],"ecosystem":"PyPI","epss":0.3992,"exploited":false,"fixed_versions":["6.24.2"],"ghsa_id":"GHSA-f3f8-vx3w-hp5q","id":"tcs_01M5KFE7YTF2E3G8AFQGN6264Y","modified_at":"2025-11-15T03:32:18.549398Z","published_at":"2024-11-06T15:57:08Z","references":["https://osv.dev/vulnerability/GHSA-f3f8-vx3w-hp5q","https://github.com/Ericsson/codechecker/security/advisories/GHSA-f3f8-vx3w-hp5q","https://nvd.nist.gov/vuln/detail/CVE-2024-10081","https://github.com/Ericsson/codechecker/commit/ad41702e3108e4b92ae5d0143a5b961cc34195eb","https://github.com/Ericsson/codechecker","https://github.com/pypa/advisory-database/tree/main/vulns/codechecker/PYSEC-2024-238.yaml"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-f3f8-vx3w-hp5q","url":"https://osv.dev/vulnerability/GHSA-f3f8-vx3w-hp5q"}],"summary":"codechecker vulnerable to authentication bypass when using specifically crafted URLs"}