StackRadarChart IndexLive demo

CVE-2022-24894

Medium

Advisory

Published 1 Feb 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.040; 90th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 84; of 17,781 indexed, latest versions
Container images: 71; deployed by those charts
Fix available: 2 of 2; affected packages

Symfony storing cookie headers in HttpCache

Carried by container images the latest versions of 84 of 17,781 indexed charts deploy, on 71 images.

Affected package	Affected versions	Fixed in	Images
symfony/http-kernelcomposer	v2.6.13, v2.7.52, v2.8.34, v3.0.9+27 more	4.4.50, 5.4.20, 6.0.20, 6.1.12	70
symfony/symfonycomposer	v3.4.47	4.4.50	1

OSV records: GHSA-h7vf-5wrv-9fhv
Also known as: BIT-symfony-2022-24894

Charts affected

84 by stars

Chart

Latest

Affected images

Radar Score

kvkkvkservice

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	symfony/http-kernel@v5.1.7	5.4.20

Open the chart page →

8,534

1 of 3 See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	symfony/http-kernel@v3.4.18	4.4.50

Open the chart page →

5,332

laravel-chartlaravel-application

1 of 1 See more

laravel-chart laravel-application 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ibarreche/cloud-back-ci :latest	e16a469c5791	symfony/http-kernel@v4.4.15	4.4.50

Open the chart page →

1,835

ocatiecataloguslocatiecatalogus

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,510

loggingcomponentloggingcomponent

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,492

logicservicelogicservice

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	symfony/http-kernel@v5.3.2	5.4.20

Open the chart page →

7,499

medewerkercatalogusmedewerkercatalogus

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	symfony/http-kernel@v5.4.8	5.4.20

Open the chart page →

7,327

memo-componentmemo-component

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,510

notification-componentnotification-component

1 of 4 See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/notification-component-php :latest	cd9656e6bc2c	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,527

commonground-gatewayopencatalogi

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/http-kernel@v5.3.16	5.4.20

Open the chart page →

9,724

orderregistratiecomponentorderregistratiecomponent

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,492

firefly-iiiphntom

1 of 2 See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	symfony/http-kernel@v6.0.8	6.0.20

Open the chart page →

1,813

podcast-helmpodcastwala-helm

1 of 2 See more

podcast-helm podcastwala-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
shivani446/podcastwala-php :v1	c0d07b7b4c8d	symfony/http-kernel@v2.6.13	4.4.50

Open the chart page →

621

procestypecatalogusprocestypecatalogus

1 of 4 See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,429

productenendienstencatalogusproductenendienstencatalogus

1 of 3 See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,510

panproto-application-nldesign

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	symfony/http-kernel@v5.1.10	5.4.20

Open the chart page →

8,725

proto-component-commongroundproto-component-commonground

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,510

laravel-workerrenoki-co

1 of 1 See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	symfony/http-kernel@v5.2.6	5.4.20

Open the chart page →

5,687

review-componentreview-component

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	symfony/http-kernel@v5.2.14	5.4.20

Open the chart page →

7,491

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	symfony/http-kernel@v5.3.10	5.4.20

Open the chart page →

2,972

mauticromholdings

1 of 3 See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
mautic/mautic :2.13-apache	a954c5868d76	symfony/http-kernel@v2.8.34	4.4.50

Open the chart page →

2,939

bookstackschmitzis

1 of 1 See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
solidnerd/bookstack :21.12	762ffd5c51d3	symfony/http-kernel@v5.4.1	5.4.20

Open the chart page →

2,751

cachetsergiotocalini

1 of 1 See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
cachethq/docker :2.3.15	a61ff0f67ea7	symfony/http-kernel@v3.0.9	4.4.50

Open the chart page →

1,896

commonground-gatewayskeleton-pip

1 of 5 See more

commonground-gateway skeleton-pip 0.1.7

1 of the 5 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/http-kernel@v5.3.16	5.4.20

Open the chart page →

2,825

taalhuizen-servicetaalhuizen-service

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	symfony/http-kernel@v5.3.6	5.4.20

Open the chart page →

7,480

repmanteam-blue

1 of 5 See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	symfony/http-kernel@v5.4.2	5.4.20

Open the chart page →

3,993

trouw-servicetrouw-service

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,510

verhuis-serviceverhuis-service

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	symfony/http-kernel@v5.2.11	5.4.20

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	symfony/http-kernel@v5.2.11	5.4.20

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	symfony/http-kernel@v5.2.10	5.4.20

Open the chart page →

7,429

apiwbstack

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	symfony/http-kernel@v5.4.10	5.4.20

Open the chart page →

2,019

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	symfony/http-kernel@v5.4.8	5.4.20

Open the chart page →

7,552

1 of 1 See more

satisfy ymrs 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-24894.

Container image	Digest	Package	Fixed in
anapsix/satisfydigest-pinned	fae78e3809e9	symfony/http-kernel@v3.4.14	4.4.50

Open the chart page →

1,572

Container images carrying it

71 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/procestypecatalogus-php :latest	956c4fb64796	symfony/http-kernel@v5.2.10	5.4.20	1
ghcr.io/conductionnl/productenendienstencatalogus-php :latest	7242da105081	symfony/http-kernel@v5.2.10	5.4.20	1
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	symfony/http-kernel@v5.2.10	5.4.20	1
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	symfony/http-kernel@v5.2.14	5.4.20	1
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	symfony/http-kernel@v5.3.6	5.4.20	1
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	symfony/http-kernel@v5.2.10	5.4.20	1
ghcr.io/conductionnl/user-component-php :latest	198db44fabb5	symfony/http-kernel@v5.4.0	5.4.20	1
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	symfony/http-kernel@v5.2.11	5.4.20	1
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	symfony/http-kernel@v5.2.11	5.4.20	1
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	symfony/http-kernel@v5.2.10	5.4.20	1
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	symfony/http-kernel@v5.2.10	5.4.20	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	symfony/http-kernel@v5.3.3	5.4.20	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	symfony/http-kernel@v5.2.11	5.4.20	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	symfony/http-kernel@v5.2.11	5.4.20	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	symfony/http-kernel@v5.4.8	5.4.20	1
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	symfony/http-kernel@v5.4.1	5.4.20	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	symfony/http-kernel@v5.4.10	5.4.20	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	symfony/http-kernel@v5.4.8	5.4.20	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	symfony/http-kernel@v5.2.6	5.4.20	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	symfony/http-kernel@v5.2.6	5.4.20	1
quay.io/renokico/laravel-helm-demo :octane-0.6.0	cad83090c58f	symfony/http-kernel@v5.2.6	5.4.20	1