StackRadarChart IndexLive demo

CVE-2020-27223

Medium

Advisory

Published 10 Mar 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.779; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 60; of 17,781 indexed, latest versions
Container images: 59; deployed by those charts
Fix available: 1 of 1; affected package

DOS vulnerability for Quoted Quality CSV headers

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 59 images.

Affected package	Affected versions	Fixed in	Images
jetty-servermaven	9.4.6.v20170531, 9.4.8.v20171121, 9.4.10.v20180503, 9.4.11.v20180605+18 more	9.4.37	59

OSV records: GHSA-m394-8rww-3jr7
Also known as: BIT-nifi-2020-27223, BIT-solr-2020-27223, BIT-spark-2020-27223

Charts affected

60 by stars

Chart

Latest

Affected images

Radar Score

onosopencord

1 of 1 See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
onosproject/onos :2.2.1	44914a8d4b3f	jetty-server@9.4.22.v20191022	9.4.37

Open the chart page →

12,927

apache-knox-helmpfisterer-knox

1 of 1 See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
farberg/apache-knox-docker :1.6.1	4b4a22487394	jetty-server@9.4.34.v20201102	9.4.37

Open the chart page →

6,237

jmxproxypndaproject

1 of 1 See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
gradiant/jmxproxy :3.4.0	45eceb1bc55c	jetty-server@9.4.8.v20171121	9.4.37

Open the chart page →

4,177

prometheus-cloudwatch-exporterprometheus-worawutchan

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-worawutchan 0.12.0

1 of the 1 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :cloudwatch_exporter-0.8.0	fc4b9b9f5e15	jetty-server@9.4.15.v20190215	9.4.37

Open the chart page →

2,831

sentry-dbsentry

1 of 10 See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
confluentinc/cp-kafka :5.4.0	1bbda887bc53	jetty-server@9.4.20.v20190813	9.4.37

Open the chart page →

10,967

atlassian-confluencesomeblackmagic

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	jetty-server@9.4.30.v20200611	9.4.37

Open the chart page →

13,605

newrelic-private-minionsstarcher

1 of 1 See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
quay.io/newrelic/synthetics-minion :2.2.21	98c26e1b8f70	jetty-server@9.4.11.v20180605	9.4.37

Open the chart page →

3,164

solrstatcan

1 of 3 See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
library/zookeeper :3.5.5	b7a76ec06f68	jetty-server@9.4.17.v20190418	9.4.37

Open the chart page →

8,806

clickhousetemp-charts

1 of 3 See more

clickhouse temp-charts 0.7.1

1 of the 3 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
library/zookeeper :3.6.1	80ad2170ad62	jetty-server@9.4.24.v20191120	9.4.37

Open the chart page →

8,707

queryservicewbstack

1 of 1 See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-27223.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice :0.3.6_0.6	b83b5b81d4b6	jetty-server@9.4.12.v20180830	9.4.37

Open the chart page →

4,649

Container images carrying it

59 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
rodolpheche/wiremock :2.27.2	2328a9fce2bf	jetty-server@9.4.30.v20200611	9.4.37	1
rundeck/rundeck :3.2.7	4d64fe56f767	jetty-server@9.4.20.v20190813	9.4.37	1
rundeck/rundeck :3.0.16	b13e8059ad72	jetty-server@9.4.11.v20180605	9.4.37	1
sismics/docs :v1.10	f4b0ef019cf1	jetty-server@9.4.36.v20210114	9.4.37	1
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	jetty-server@9.4.6.v20170531	9.4.37	1
vromero/activemq-artemis :2.16.0	408d6a46b153	jetty-server@9.4.27.v20200227	9.4.37	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	jetty-server@9.4.30.v20200611	9.4.37	1
ghcr.io/wbstack/queryservice :0.3.6_0.6	b83b5b81d4b6	jetty-server@9.4.12.v20180830	9.4.37	1
quay.io/newrelic/synthetics-minion :2.2.21	98c26e1b8f70	jetty-server@9.4.11.v20180605	9.4.37	1