StackRadar

CVE-2022-27772

High

Advisory

Published 11 Jul 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
41
of 17,781 indexed, latest versions
Container images
41
deployed by those charts
Fix available
1 of 1
affected package

Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 41 images.

Affected packageAffected versionsFixed inImages
spring-bootmaven1.4.0.RELEASE, 1.4.4.RELEASE, 1.5.2.RELEASE, 1.5.3.RELEASE+19 more2.2.11.RELEASE41
OSV records
GHSA-cm59-pr5q-cw85

Charts affected

41 by stars
ChartLatestAffected imagesRadar Score
zipkincarlosjgp0.2.01 of 2See more

zipkin carlosjgp 0.2.0

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.21.060c3970df479
spring-boot@2.2.6.RELEASE
2.2.11.RELEASE

Open the chart page →

3,229
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
spring-boot@1.5.17.RELEASE
2.2.11.RELEASE

Open the chart page →

10,732
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE

Open the chart page →

9,154
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.1.067d50e4deff4
spring-boot@1.5.11.RELEASE
2.2.11.RELEASE

Open the chart page →

18,042
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
spring-boot@2.2.4.RELEASE
2.2.11.RELEASE

Open the chart page →

8,752
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
spring-boot@2.2.6.RELEASE
2.2.11.RELEASE

Open the chart page →

6,531
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
spring-boot@1.5.22.RELEASE
2.2.11.RELEASE

Open the chart page →

11,553
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
torrespro/mca-worker:2.0.06d3bd305a1ba
spring-boot@2.2.1.RELEASE
2.2.11.RELEASE

Open the chart page →

19,187
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
spring-boot@1.5.17.RELEASE
2.2.11.RELEASE
seldonio/cluster-manager:0.2.729e362bb1ba2
spring-boot@1.5.17.RELEASE
2.2.11.RELEASE

Open the chart page →

13,798
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
spring-boot@1.5.22.RELEASE
2.2.11.RELEASE

Open the chart page →

11,553
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
spring-boot@1.5.15.RELEASE
2.2.11.RELEASE

Open the chart page →

5,277
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
spring-boot@2.2.1.RELEASE
2.2.11.RELEASE

Open the chart page →

19,745
event-store-servicechoerodon0.8.01 of 2See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
choerodon/event-store-service:0.8.03c94c97f6f69
spring-boot@1.5.3.RELEASE
2.2.11.RELEASE

Open the chart page →

9,808
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
spring-boot@1.5.15.RELEASE
2.2.11.RELEASE

Open the chart page →

23,665
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-boot@2.0.2.RELEASE
2.2.11.RELEASE

Open the chart page →

16,860
forwardauthdniel2.0.131 of 1See more

forwardauth dniel 2.0.13

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
dniel/forwardauth:latestf67129ea1c64
spring-boot@2.1.6.RELEASE
2.2.11.RELEASE

Open the chart page →

4,592
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
spring-boot@1.5.15.RELEASE
2.2.11.RELEASE

Open the chart page →

19,802
shenyuerdeng2.4.212 of 2See more

shenyu erdeng 2.4.21

2 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE

Open the chart page →

12,513
scorpio-brokerfiware0.3.31 of 10See more

scorpio-broker fiware 0.3.3

1 of the 10 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-boot@2.1.9.RELEASE
2.2.11.RELEASE

Open the chart page →

55,600
scorpiobrokerfiware0.1.21 of 10See more

scorpiobroker fiware 0.1.2

1 of the 10 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-boot@2.1.9.RELEASE
2.2.11.RELEASE

Open the chart page →

55,600
my-chartfleet-web-app0.1.03 of 6See more

my-chart fleet-web-app 0.1.0

3 of the 6 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-boot@1.5.2.RELEASE
2.2.11.RELEASE
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-boot@1.4.0.RELEASE
2.2.11.RELEASE
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-boot@1.4.0.RELEASE
2.2.11.RELEASE

Open the chart page →

24,296
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
spring-boot@2.2.7.RELEASE
2.2.11.RELEASE

Open the chart page →

19,215
nacosheidaodageshiwoVerified publisher0.1.51 of 1See more

nacos heidaodageshiwo 0.1.5

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-boot@2.1.17.RELEASE
2.2.11.RELEASE

Open the chart page →

3,978
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
spring-boot@2.0.4.RELEASE
2.2.11.RELEASE

Open the chart page →

6,451
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-boot@1.5.4.RELEASE
2.2.11.RELEASE
ibmcom/microclimate-theia:lateste17bdccc5030
spring-boot@1.5.4.RELEASE
2.2.11.RELEASE

Open the chart page →

57,669
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
spring-boot@2.1.6.RELEASE
2.2.11.RELEASE

Open the chart page →

7,498
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
spring-boot@2.1.17.RELEASE
2.2.11.RELEASE

Open the chart page →

4,153
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
spring-boot@2.1.1.RELEASE
2.2.11.RELEASE

Open the chart page →

26,356
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-boot@2.0.2.RELEASE
2.2.11.RELEASE

Open the chart page →

15,855
ves-agentopencord1.0.21 of 1See more

ves-agent opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
opencord/ves-agent:1.0.04187e2a8c918
spring-boot@2.0.2.RELEASE
2.2.11.RELEASE

Open the chart page →

6,350
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
spring-boot@2.1.9.RELEASE
2.2.11.RELEASE

Open the chart page →

26,339
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
spring-boot@2.2.1.RELEASE
2.2.11.RELEASE

Open the chart page →

19,720
helloworldpauls-helm-charts2.0.01 of 1See more

helloworld pauls-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
paulczar/spring-helloworld:latestc7140cecd5f7
spring-boot@2.1.3.RELEASE
2.2.11.RELEASE

Open the chart page →

5,596
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
spring-boot@2.2.5.RELEASE
2.2.11.RELEASE
reportportal/service-authorization:5.7.09e73114dbd15
spring-boot@2.2.5.RELEASE
2.2.11.RELEASE

Open the chart page →

25,737
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-boot@2.1.17.RELEASE
2.2.11.RELEASE

Open the chart page →

3,978
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
spring-boot@1.5.17.RELEASE
2.2.11.RELEASE

Open the chart page →

8,098
shenyushenyu-helm-chart-test2.4.272 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

2 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE

Open the chart page →

12,513
umsappstacksimplifyVerified publisher1.0.01 of 3See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
spring-boot@2.1.6.RELEASE
2.2.11.RELEASE

Open the chart page →

6,101
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
spring-boot@1.4.4.RELEASE
2.2.11.RELEASE

Open the chart page →

8,554
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
spring-boot@2.2.0.RELEASE
2.2.11.RELEASE

Open the chart page →

4,538
shenyutest-helm2.4.212 of 2See more

shenyu test-helm 2.4.21

2 of the 2 container images this version deploys carry CVE-2022-27772.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE

Open the chart page →

12,513

Container images carrying it

41 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/shenyu-admin:2.4.2e8b7c4ddd069
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE
3
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE
3
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-boot@2.0.2.RELEASE
2.2.11.RELEASE
2
mbentley/omada-controller:4.3f4e682274bed
spring-boot@1.5.22.RELEASE
2.2.11.RELEASE
2
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-boot@2.1.17.RELEASE
2.2.11.RELEASE
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
spring-boot@2.1.9.RELEASE
2.2.11.RELEASE
2
apache/iotdb:0.11.28647309f95d1
spring-boot@1.5.15.RELEASE
2.2.11.RELEASE
1
apache/nifi-registry:0.8.0974efa2f21da
spring-boot@2.2.6.RELEASE
2.2.11.RELEASE
1
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
spring-boot@2.2.2.RELEASE
2.2.11.RELEASE
1
apache/skywalking-ui:8.1.067d50e4deff4
spring-boot@1.5.11.RELEASE
2.2.11.RELEASE
1
choerodon/event-store-service:0.8.03c94c97f6f69
spring-boot@1.5.3.RELEASE
2.2.11.RELEASE
1
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
spring-boot@2.2.1.RELEASE
2.2.11.RELEASE
1
dniel/forwardauth:latestf67129ea1c64
spring-boot@2.1.6.RELEASE
2.2.11.RELEASE
1
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
spring-boot@2.2.1.RELEASE
2.2.11.RELEASE
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
spring-boot@1.5.4.RELEASE
2.2.11.RELEASE
1
ibmcom/microclimate-theia:lateste17bdccc5030
spring-boot@1.5.4.RELEASE
2.2.11.RELEASE
1
just1not2/streama:1.10.48a2305192dec
spring-boot@1.4.4.RELEASE
2.2.11.RELEASE
1
kimb88/hello-world-spring-boot:latest0639155241cb
spring-boot@2.0.4.RELEASE
2.2.11.RELEASE
1
ladeit/ladeit:latest962b665ffe82
spring-boot@2.1.1.RELEASE
2.2.11.RELEASE
1
microcks/microcks:0.8.0e3a3e0c67b09
spring-boot@1.5.17.RELEASE
2.2.11.RELEASE
1
nacos/nacos-server:1.4.1fe6e5688cdf3
spring-boot@2.1.17.RELEASE
2.2.11.RELEASE
1
opencord/ves-agent:1.0.04187e2a8c918
spring-boot@2.0.2.RELEASE
2.2.11.RELEASE
1
openzipkin/zipkin:2.21.060c3970df479
spring-boot@2.2.6.RELEASE
2.2.11.RELEASE
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
spring-boot@2.2.0.RELEASE
2.2.11.RELEASE
1
opsmx11/issuegen:v2.1.05c50ca123d88
spring-boot@2.1.9.RELEASE
2.2.11.RELEASE
1
paulczar/spring-helloworld:latestc7140cecd5f7
spring-boot@2.1.3.RELEASE
2.2.11.RELEASE
1
reportportal/service-api:5.7.29df41f8fb320
spring-boot@2.2.5.RELEASE
2.2.11.RELEASE
1
reportportal/service-authorization:5.7.09e73114dbd15
spring-boot@2.2.5.RELEASE
2.2.11.RELEASE
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
spring-boot@1.5.2.RELEASE
2.2.11.RELEASE
1
richardchesterwood/k8s-fleetman-position-simulator:release20b540a28f5a6
spring-boot@1.4.0.RELEASE
2.2.11.RELEASE
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
spring-boot@1.4.0.RELEASE
2.2.11.RELEASE
1
rundeck/rundeck:3.2.74d64fe56f767
spring-boot@1.5.15.RELEASE
2.2.11.RELEASE
1
rundeck/rundeck:3.0.16b13e8059ad72
spring-boot@1.5.15.RELEASE
2.2.11.RELEASE
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
spring-boot@2.1.6.RELEASE
2.2.11.RELEASE
1
seldonio/apife:0.2.7ba81b17f00eb
spring-boot@1.5.17.RELEASE
2.2.11.RELEASE
1
seldonio/apife:0.3.1eea0d3f578ca
spring-boot@1.5.17.RELEASE
2.2.11.RELEASE
1
seldonio/cluster-manager:0.2.729e362bb1ba2
spring-boot@1.5.17.RELEASE
2.2.11.RELEASE
1
torrespro/mca-worker:2.0.06d3bd305a1ba
spring-boot@2.2.1.RELEASE
2.2.11.RELEASE
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
spring-boot@2.2.4.RELEASE
2.2.11.RELEASE
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
spring-boot@2.2.7.RELEASE
2.2.11.RELEASE
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
spring-boot@2.1.6.RELEASE
2.2.11.RELEASE
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.