{"id":"CVE-2021-44217","aliases":["GHSA-fxmx-pfm2-85m2","PYSEC-2022-43181","PYSEC-2026-625"],"title":"Cross-site Scripting in Ericsson CodeChecker","summary":"Cross-site Scripting in Ericsson CodeChecker","severity":"medium","vendor":"codechecker","product":"codechecker","ecosystem":"pip","affected":["codechecker < 6.18.2"],"patched":["codechecker 6.18.2"],"published":"2022-01-21","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-fxmx-pfm2-85m2","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44217"},{"url":"https://github.com/Ericsson/codechecker/pull/3549"},{"url":"https://github.com/Ericsson/codechecker/commit/72ee51158e6d81150320223b85410c179b9ee2b1"},{"url":"https://codechecker-demo.eastus.cloudapp.azure.com"},{"url":"https://github.com/Ericsson/codechecker"},{"url":"https://github.com/Ericsson/codechecker/releases"},{"url":"https://github.com/Ericsson/codechecker/releases/tag/v6.18.2"},{"url":"https://github.com/Hyperkopite/CVE-2021-44217/blob/main/README.md"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/codechecker-api/PYSEC-2022-43181.yaml"},{"url":"https://user-images.githubusercontent.com/9525971/142965091-e118b012-a7fc-4c2f-ad0c-80aeed6f7ec9.png"}],"tags":["osv","pip","exploit-available"],"epss":0.0164,"epssPercentile":0.75341,"ingestedAt":"2026-07-08T18:25:49.164Z","exploits":{"github":1,"githubRepos":["https://github.com/Hyperkopite/CVE-2021-44217"],"checkedAt":"2026-09-24T07:52:48.903Z"},"exploitAvailable":true,"slug":"CVE-2021-44217","body":"## Overview\n\nIn Ericsson CodeChecker prior to 6.18.2, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.\n\n## Affected packages\n\n- `codechecker < 6.18.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `codechecker 6.18.2`","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":27.5,"likelihood":0.3,"exploitation":12,"ransomware":0},"changes":[{"seq":4574,"id":"CVE-2021-44217","ts":1788887191728,"field":"exploit_available","old":"false","new":"true"},{"seq":3457,"id":"CVE-2021-44217","ts":1788886308756,"field":"exploit_available","old":"true","new":"false"},{"seq":2311,"id":"CVE-2021-44217","ts":1788882978360,"field":"exploit_available","old":"false","new":"true"},{"seq":1340,"id":"CVE-2021-44217","ts":1788882390472,"field":"exploit_available","old":"true","new":"false"},{"seq":454,"id":"CVE-2021-44217","ts":1788881826440,"field":"exploit_available","old":"false","new":"true"}]}