GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/36819?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36819?format=api",
    "vulnerability_id": "VCID-dxb5-cwgk-6uhg",
    "summary": "CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Zip files uploaded to the server endpoint of `CodeChecker store` are not properly sanitized. An attacker, using a path traversal attack, can load and display files on the machine of `CodeChecker server`. The vulnerable endpoint is `/Default/v6.53/CodeCheckerService@massStoreRun`. The path traversal vulnerability allows reading data on the machine of the `CodeChecker server`, with the same permission level as the `CodeChecker server`.\nThe attack requires a user account on the `CodeChecker server`, with permission to store to a server, and view the stored report. This vulnerability has been patched in version 6.23.",
    "aliases": [
        {
            "alias": "CVE-2023-49793"
        },
        {
            "alias": "GHSA-h26w-r4m5-8rrf"
        },
        {
            "alias": "PYSEC-2024-54"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41796?format=api",
            "purl": "pkg:pypi/codechecker@6.23.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.23.0"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41778?format=api",
            "purl": "pkg:pypi/codechecker@6.16.0a1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.16.0a1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41779?format=api",
            "purl": "pkg:pypi/codechecker@6.16.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.16.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41780?format=api",
            "purl": "pkg:pypi/codechecker@6.17.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.17.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41781?format=api",
            "purl": "pkg:pypi/codechecker@6.18.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.18.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41782?format=api",
            "purl": "pkg:pypi/codechecker@6.18.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.18.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41783?format=api",
            "purl": "pkg:pypi/codechecker@6.18.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.18.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41784?format=api",
            "purl": "pkg:pypi/codechecker@6.19.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.19.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41785?format=api",
            "purl": "pkg:pypi/codechecker@6.19.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.19.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41786?format=api",
            "purl": "pkg:pypi/codechecker@6.20.0rc1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.20.0rc1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41787?format=api",
            "purl": "pkg:pypi/codechecker@6.20.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.20.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41788?format=api",
            "purl": "pkg:pypi/codechecker@6.21.0rc1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.21.0rc1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41789?format=api",
            "purl": "pkg:pypi/codechecker@6.21.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.21.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41790?format=api",
            "purl": "pkg:pypi/codechecker@6.22.0rc1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.22.0rc1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41791?format=api",
            "purl": "pkg:pypi/codechecker@6.22.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.22.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41792?format=api",
            "purl": "pkg:pypi/codechecker@6.22.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.22.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41793?format=api",
            "purl": "pkg:pypi/codechecker@6.22.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.22.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41794?format=api",
            "purl": "pkg:pypi/codechecker@6.22.2.post1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.22.2.post1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/41795?format=api",
            "purl": "pkg:pypi/codechecker@6.23.0rc2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-34z1-k1dg-uqhh"
                },
                {
                    "vulnerability": "VCID-6urc-avwv-vbdk"
                },
                {
                    "vulnerability": "VCID-8qpt-75sy-mbes"
                },
                {
                    "vulnerability": "VCID-dxb5-cwgk-6uhg"
                },
                {
                    "vulnerability": "VCID-h6wn-2dtj-q7hq"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/codechecker@6.23.0rc2"
        }
    ],
    "references": [
        {
            "reference_url": "https://github.com/Ericsson/codechecker/commit/46bada41e32f3ba0f6011d5c556b579f6dddf07a",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "6.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
                }
            ],
            "url": "https://github.com/Ericsson/codechecker/commit/46bada41e32f3ba0f6011d5c556b579f6dddf07a"
        },
        {
            "reference_url": "https://github.com/Ericsson/codechecker/security/advisories/GHSA-h26w-r4m5-8rrf",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "6.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
                }
            ],
            "url": "https://github.com/Ericsson/codechecker/security/advisories/GHSA-h26w-r4m5-8rrf"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "6.5 - 6.5",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dxb5-cwgk-6uhg"
}