CVE-2024-53829

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Cross-site request forgery allows an unauthenticated attacker to hijack the authentication of a logged in user, and use the web API with the same permissions, including but not limited to adding, removing or editing products. The attacker needs to know the ID of the available products to modify or delete them. The attacker cannot directly exfiltrate data (view) from CodeChecker, due to being limited to form-based CSRF. This issue affects CodeChecker: through 6.24.4.

• CWE-352

• https://github.com/Ericsson/codechecker/security/advisories/GHSA-f8c8-4pm7-w885Exploit, Vendor Advisory

Published

Jan 21, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53823Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-53824Improper Control of Filename for Include/Require Statement i…7.5
• CVE-2024-53825Missing Authorization vulnerability in Ninja Team Filebird f…7.2
• CVE-2024-53826Missing Authorization vulnerability in WPSight WPCasa wpcasa…5.3
• CVE-2024-53827Ericsson Packet Core Controller (PCC) contains a vulnerabili…7.5
• CVE-2024-53828Ericsson Packet Core Controller (PCC) versions prior to 1.38…5.3
• CVE-2024-5383A vulnerability classified as problematic has been found in …5.4
• CVE-2024-53832A vulnerability has been identified in CPCI85 Central Proces…5.1
• CVE-2024-53833In prepare_response_locked of lwis_transaction.c, there is …7.8
• CVE-2024-53834In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, the…7.5
• CVE-2024-53835there is a possible biometric bypass due to an unusual root …7.8
• CVE-2024-53836In wbrc_bt_dev_write of wb_regon_coordinator.c, there is a p…6.7