StackRadar

CVE-2022-2232

Low

Advisory

Published 29 Nov 2023In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
10
of 17,985 indexed, latest versions
Container images
8
deployed by those charts
Fix available
2 of 2
affected packages

Keycloak vulnerable to LDAP Injection on UsernameForm Login

Carried by container images the latest versions of 10 of 17,985 indexed charts deploy, on 8 images.

Affected packageAffected versionsFixed inImages
keycloak-ldap-federationmaven14.0.0, 17.0.1, 19.0.3, 20.0.1+3 more23.0.18
keycloak-servicesmaven14.0.0, 17.0.1, 19.0.3, 20.0.1+3 more23.0.18
OSV records
GHSA-8hc5-rmgf-qx6p

Charts affected

10 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-ldap-federation@17.0.1
keycloak-services@17.0.1
23.0.1
23.0.1

Open the chart page →

7,922
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
keycloak-ldap-federation@20.0.5
keycloak-services@20.0.5
23.0.1
23.0.1

Open the chart page →

39,787
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-ldap-federation@17.0.1
keycloak-services@17.0.1
23.0.1
23.0.1

Open the chart page →

7,922
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
keycloak-ldap-federation@19.0.3
keycloak-services@19.0.3
23.0.1
23.0.1

Open the chart page →

13,873
keycloakbhuwanupadhyayVerified publisher1.0.01 of 2See more

keycloak bhuwanupadhyay 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.25227edcc7595
keycloak-ldap-federation@20.0.2
keycloak-services@20.0.2
23.0.1
23.0.1

Open the chart page →

6,686
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-ldap-federation@20.0.5
keycloak-services@20.0.5
23.0.1
23.0.1

Open the chart page →

57,761
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-ldap-federation@20.0.5
keycloak-services@20.0.5
23.0.1
23.0.1

Open the chart page →

7,152
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
keycloak-ldap-federation@20.0.1
keycloak-services@20.0.1
23.0.1
23.0.1

Open the chart page →

6,686
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
keycloak-ldap-federation@14.0.0
keycloak-services@14.0.0
23.0.1
23.0.1

Open the chart page →

29,686
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-2232.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
keycloak-ldap-federation@20.0.3
keycloak-services@20.0.3
23.0.1
23.0.1

Open the chart page →

6,258

Container images carrying it

8 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:20.0054ef67eb7da
keycloak-ldap-federation@20.0.5
keycloak-services@20.0.5
23.0.1
23.0.1
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
keycloak-ldap-federation@17.0.1
keycloak-services@17.0.1
23.0.1
23.0.1
2
assistiot/identity-manager_kc:latest0df4b4fa899a
keycloak-ldap-federation@19.0.3
keycloak-services@19.0.3
23.0.1
23.0.1
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
keycloak-ldap-federation@20.0.5
keycloak-services@20.0.5
23.0.1
23.0.1
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
keycloak-ldap-federation@14.0.0
keycloak-services@14.0.0
23.0.1
23.0.1
1
quay.io/keycloak/keycloak:20.0.25227edcc7595
keycloak-ldap-federation@20.0.2
keycloak-services@20.0.2
23.0.1
23.0.1
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
keycloak-ldap-federation@20.0.1
keycloak-services@20.0.1
23.0.1
23.0.1
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
keycloak-ldap-federation@20.0.3
keycloak-services@20.0.3
23.0.1
23.0.1
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.