CodeChecker <= 6.24.1 - Authentication Bypass (CVE-2024-10081)

Authentication bypass occurs when the API URL ends with Authentication, Configuration or ServerInfo. This bypass allows superuser access to all API endpoints other than Authentication. These endpoints include the ability to add, edit, and remove products, among others.

认证绕过现象发生在API URL以Authentication、Configuration或ServerInfo结尾时。此类绕过允许超级用户访问除Authentication之外的所有API端点。这些端点包括添加、编辑和移除产品等能力。