{"action":"Upgrade codechecker to 6.24.2 or later.","affected":[{"fixed":"6.24.2","introduced":"0"}],"component":"codechecker","cve_ids":["CVE-2024-10082"],"ecosystem":"PyPI","epss":0.00479,"exploited":false,"fixed_versions":["6.24.2"],"ghsa_id":"GHSA-fpm5-2wcj-vfr7","id":"tcs_01M5KFFR9PA0ARF5MMKAG6S02Q","modified_at":"2025-11-15T03:32:00.363355Z","published_at":"2024-11-06T15:57:57Z","references":["https://osv.dev/vulnerability/GHSA-fpm5-2wcj-vfr7","https://github.com/Ericsson/codechecker/security/advisories/GHSA-fpm5-2wcj-vfr7","https://nvd.nist.gov/vuln/detail/CVE-2024-10082","https://github.com/Ericsson/codechecker/commit/866f3796d01f3158c49b87ccae3e09c0807c1c7b","https://github.com/Ericsson/codechecker","https://github.com/pypa/advisory-database/tree/main/vulns/codechecker/PYSEC-2024-183.yaml"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-fpm5-2wcj-vfr7","url":"https://osv.dev/vulnerability/GHSA-fpm5-2wcj-vfr7"}],"summary":"codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service"}