CVE-2021-44217: Ericsson Codechecker

Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.

In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API.

Affected products

• Ericsson Codechecker: up to and including 6.18.0

Published 2022-01-18. Last modified 2026-06-17.