StackRadar

CVE-2020-27216

High

Advisory

Published 4 Nov 2020In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.044
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
47
of 17,781 indexed, latest versions
Container images
41
deployed by those charts
Fix available
1 of 1
affected package

Local Temp Directory Hijacking Vulnerability

Carried by container images the latest versions of 47 of 17,781 indexed charts deploy, on 41 images.

Affected packageAffected versionsFixed inImages
jetty-webappmaven7.6.0.v20120127, 8.1.12.v20130726, 8.1.14.v20131031, 8.1.17.v20150415+21 more9.4.33.v2020102041
OSV records
GHSA-g3wg-6mcf-8jj6

Charts affected

47 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jetty-webapp@9.3.24.v20180605
9.4.33.v20201020
dbanda/spark:2.4.6d0e6367876ae
jetty-webapp@9.3.24.v20180605
9.4.33.v20201020

Open the chart page →

13,738
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
jetty-webapp@9.4.27.v20200227
9.4.33.v20201020

Open the chart page →

6,048
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-webapp@9.3.20.v20170531
9.4.33.v20201020

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
jetty-webapp@9.4.20.v20190813
9.4.33.v20201020

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jetty-webapp@9.3.20.v20170531
9.4.33.v20201020

Open the chart page →

7,335
dynamodbkeyporttech0.1.271 of 2See more

dynamodb keyporttech 0.1.27

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
amazon/dynamodb-local:1.12.08414d80019b0
jetty-webapp@8.1.12.v20130726
9.4.33.v20201020

Open the chart page →

1,304
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020

Open the chart page →

8,198
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
jetty-webapp@9.4.27.v20200227
9.4.33.v20201020

Open the chart page →

4,419
wiremockdeliveryheroVerified publisher1.4.61 of 2See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
jetty-webapp@9.4.20.v20190813
9.4.33.v20201020

Open the chart page →

2,140
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-webapp@9.3.19.v20170502
9.4.33.v20201020

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-webapp@9.3.19.v20170502
9.4.33.v20201020

Open the chart page →

17,511
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
jetty-webapp@9.4.19.v20190610
9.4.33.v20201020

Open the chart page →

6,531
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
jetty-webapp@9.4.15.v20190215
9.4.33.v20201020

Open the chart page →

11,553
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-webapp@9.3.19.v20170502
9.4.33.v20201020

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
jetty-webapp@9.4.14.v20181114
9.4.33.v20201020

Open the chart page →

6,165
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
jetty-webapp@9.4.18.v20190429
9.4.33.v20201020

Open the chart page →

4,983
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
jetty-webapp@9.4.15.v20190215
9.4.33.v20201020

Open the chart page →

11,553
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
jetty-webapp@9.4.24.v20191120
9.4.33.v20201020

Open the chart page →

5,277
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-webapp@9.4.6.v20170531
9.4.33.v20201020

Open the chart page →

5,078
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
jetty-webapp@9.4.14.v20181114
9.4.33.v20201020

Open the chart page →

9,144
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
jetty-webapp@9.4.11.v20180605
9.4.33.v20201020

Open the chart page →

2,837
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
jetty-webapp@9.4.11.v20180605
9.4.33.v20201020

Open the chart page →

23,665
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
jetty-webapp@9.4.25.v20191220
9.4.33.v20201020

Open the chart page →

8,986
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
jetty-webapp@9.2.22.v20170606
9.4.33.v20201020

Open the chart page →

11,174
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
jetty-webapp@9.4.20.v20190813
9.4.33.v20201020

Open the chart page →

19,802
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-webapp@9.3.19.v20170502
9.4.33.v20201020

Open the chart page →

17,511
wiremockhelm-charts-nr1.4.61 of 2See more

wiremock helm-charts-nr 1.4.6

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
jetty-webapp@9.4.20.v20190813
9.4.33.v20201020

Open the chart page →

2,140
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
jetty-webapp@9.4.5.v20170502
9.4.33.v20201020

Open the chart page →

10,682
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jetty-webapp@9.4.30.v20200611
9.4.33.v20201020

Open the chart page →

12,856
wiremocklebenitzaVerified publisher0.3.11 of 1See more

wiremock lebenitza 0.3.1

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.27.22328a9fce2bf
jetty-webapp@9.4.30.v20200611
9.4.33.v20201020

Open the chart page →

2,427
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
jetty-webapp@9.4.12.v20180830
9.4.33.v20201020

Open the chart page →

43,341
datawolfncsaVerified publisher1.1.01 of 3See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
ncsa/datawolf:4.7.0af6649d59150
jetty-webapp@9.2.2.v20140723
9.4.33.v20201020

Open the chart page →

4,989
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
jetty-webapp@9.4.32.v20200930
9.4.33.v20201020

Open the chart page →

55,726
dependency-tracknovum-rgi-charts0.1.81 of 2See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
owasp/dependency-track:3.8.0efc65e702ee1
jetty-webapp@9.4.27.v20200227
9.4.33.v20201020

Open the chart page →

3,633
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
jetty-webapp@8.1.17.v20150415
9.4.33.v20201020

Open the chart page →

88,546
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
jetty-webapp@9.4.22.v20191022
9.4.33.v20201020

Open the chart page →

12,927
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
jetty-webapp@8.1.17.v20150415
9.4.33.v20201020

Open the chart page →

38,865
jmxproxypndaproject0.1.01 of 1See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
gradiant/jmxproxy:3.4.045eceb1bc55c
jetty-webapp@9.4.8.v20171121
9.4.33.v20201020

Open the chart page →

4,177
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
jetty-webapp@9.3.24.v20180605
9.4.33.v20201020

Open the chart page →

9,606
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
jetty-webapp@8.1.14.v20131031
9.4.33.v20201020

Open the chart page →

6,907
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jetty-webapp@9.4.11.v20180605
9.4.33.v20201020

Open the chart page →

3,164
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
jetty-webapp@9.3.24.v20180605
9.4.33.v20201020

Open the chart page →

13,767
queryservicewbstack0.2.11 of 1See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-27216.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
jetty-webapp@9.4.12.v20180830
9.4.33.v20201020

Open the chart page →

4,649

Container images carrying it

41 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020
4
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-webapp@9.3.19.v20170502
9.4.33.v20201020
4
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020
2
mbentley/omada-controller:4.3f4e682274bed
jetty-webapp@9.4.15.v20190215
9.4.33.v20201020
2
rodolpheche/wiremock:2.26.03be08a386092
jetty-webapp@9.4.20.v20190813
9.4.33.v20201020
2
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-webapp@9.3.20.v20170531
9.4.33.v20201020
1
amazon/dynamodb-local:1.12.08414d80019b0
jetty-webapp@8.1.12.v20130726
9.4.33.v20201020
1
apache/iotdb:0.11.28647309f95d1
jetty-webapp@9.4.24.v20191120
9.4.33.v20201020
1
apache/nifi-registry:0.8.0974efa2f21da
jetty-webapp@9.4.19.v20190610
9.4.33.v20201020
1
craigwillis/c2metadata-bd:latestae317d7e4724
jetty-webapp@9.4.32.v20200930
9.4.33.v20201020
1
datappeal/hive-metastore:lateste38c085a3567
jetty-webapp@9.3.24.v20180605
9.4.33.v20201020
1
dbanda/livy:0.80ca125e68e53
jetty-webapp@9.3.24.v20180605
9.4.33.v20201020
1
dbanda/spark:2.4.6d0e6367876ae
jetty-webapp@9.3.24.v20180605
9.4.33.v20201020
1
dniel/api-posts:master45a667852f2a
jetty-webapp@9.4.25.v20191220
9.4.33.v20201020
1
fonoster/routr:1.0.0-rc52ca65af17cbc
jetty-webapp@9.4.18.v20190429
9.4.33.v20201020
1
gocd/gocd-server:v19.3.02da45cb09d57
jetty-webapp@9.4.14.v20181114
9.4.33.v20201020
1
gradiant/hdfs:3.2.2e3bf364fe713
jetty-webapp@9.4.20.v20190813
9.4.33.v20201020
1
gradiant/jmxproxy:3.4.045eceb1bc55c
jetty-webapp@9.4.8.v20171121
9.4.33.v20201020
1
jenkinsci/jenkins:2.67a1f33f004659
jetty-webapp@9.4.5.v20170502
9.4.33.v20201020
1
library/neo4j:3.4.5-enterprisea1ba477fa412
jetty-webapp@9.4.11.v20180605
9.4.33.v20201020
1
library/neo4j:3.3.0d4eaa8484246
jetty-webapp@9.2.22.v20170606
9.4.33.v20201020
1
library/solr:8.7.0d124efd81fbb
jetty-webapp@9.4.27.v20200227
9.4.33.v20201020
1
library/storm:2.4.0bd5d420506d6
jetty-webapp@9.4.14.v20181114
9.4.33.v20201020
1
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
jetty-webapp@9.4.12.v20180830
9.4.33.v20201020
1
muluder/prograncontrollermcord:0.1.843b597a93da7
jetty-webapp@8.1.17.v20150415
9.4.33.v20201020
1
ncsa/datawolf:4.7.0af6649d59150
jetty-webapp@9.2.2.v20140723
9.4.33.v20201020
1
omecproject/onos-progran:1.0.05715e5648aa0
jetty-webapp@8.1.17.v20150415
9.4.33.v20201020
1
onosproject/onos:2.2.144914a8d4b3f
jetty-webapp@9.4.22.v20191022
9.4.33.v20201020
1
owasp/dependency-track:3.8.0efc65e702ee1
jetty-webapp@9.4.27.v20200227
9.4.33.v20201020
1
rodolpheche/wiremock:2.27.22328a9fce2bf
jetty-webapp@9.4.30.v20200611
9.4.33.v20201020
1
rundeck/rundeck:3.2.74d64fe56f767
jetty-webapp@9.4.20.v20190813
9.4.33.v20201020
1
rundeck/rundeck:3.0.16b13e8059ad72
jetty-webapp@9.4.11.v20180605
9.4.33.v20201020
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jetty-webapp@7.6.0.v20120127
9.4.33.v20201020
1
sslhep/hive-metastore:3.1.39e80af083079
jetty-webapp@9.3.20.v20170531
9.4.33.v20201020
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-webapp@9.4.6.v20170531
9.4.33.v20201020
1
trinodb/trino:405ee80ab5eeab2
jetty-webapp@9.3.24.v20180605
9.4.33.v20201020
1
vromero/activemq-artemis:2.16.0408d6a46b153
jetty-webapp@9.4.27.v20200227
9.4.33.v20201020
1
xetusoss/archiva:v2.2.588f25242b9ee
jetty-webapp@8.1.14.v20131031
9.4.33.v20201020
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jetty-webapp@9.4.30.v20200611
9.4.33.v20201020
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
jetty-webapp@9.4.12.v20180830
9.4.33.v20201020
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jetty-webapp@9.4.11.v20180605
9.4.33.v20201020
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.