CVE-2022-31628

Medium

Advisory

Published 28 Sept 2022In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.006; 47th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 8; of 17,781 indexed, latest versions
Container images: 6; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 6 images.

Affected package	Affected versions	Fixed in	Images
php7.4deb	7.4.3-4ubuntu2.6, 7.4.3-4ubuntu2.12, 7.4.3-4ubuntu2.13, 7.4.25-1+deb11u1+1 more	7.4.3-4ubuntu2.15, 7.4.33-1+deb11u1	5
php8.1deb	8.1.2-1ubuntu2.3	8.1.2-1ubuntu2.8	1

OSV records: DEBIAN-CVE-2022-31628 UBUNTU-CVE-2022-31628
Also known as: USN-5717-1

Charts affected

8 by stars

Chart

Latest

Affected images

Radar Score

zabbixcetic

3.1.3

1 of 5 See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2022-31628.

Container image	Digest	Package	Fixed in
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	php8.1@8.1.2-1ubuntu2.3	8.1.2-1ubuntu2.8

Open the chart page →

33,725

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2022-31628.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	php7.4@7.4.3-4ubuntu2.13	7.4.3-4ubuntu2.15

Open the chart page →

18,509

zabbix-serveraekondratiev

1.0.6

1 of 4 See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2022-31628.

Container image	Digest	Package	Fixed in
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	php7.4@7.4.3-4ubuntu2.6	7.4.3-4ubuntu2.15

Open the chart page →

30,668

passboltcnieg

1.1.17

1 of 2 See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2022-31628.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	php7.4@7.4.25-1+deb11u1	7.4.33-1+deb11u1

Open the chart page →

3,543

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2022-31628.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	php7.4@7.4.25-1+deb11u1	7.4.33-1+deb11u1

Open the chart page →

10,817

openldapcsic-charts

0.1.1

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-31628.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	php7.4@7.4.30-1+deb11u1	7.4.33-1+deb11u1

Open the chart page →

5,293

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2022-31628.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	php7.4@7.4.3-4ubuntu2.12	7.4.3-4ubuntu2.15

Open the chart page →

22,658

openldapopenldap

0.1.1

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2022-31628.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	php7.4@7.4.30-1+deb11u1	7.4.33-1+deb11u1

Open the chart page →

5,293

Container images carrying it

6 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	php7.4@7.4.30-1+deb11u1	7.4.33-1+deb11u1	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	php7.4@7.4.25-1+deb11u1	7.4.33-1+deb11u1	2
mediagis/nominatim :3.7	c15e941485ef	php7.4@7.4.3-4ubuntu2.12	7.4.3-4ubuntu2.15	1
snipe/snipe-it :v6.0.14	55fb7636a98c	php7.4@7.4.3-4ubuntu2.13	7.4.3-4ubuntu2.15	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	php7.4@7.4.3-4ubuntu2.6	7.4.3-4ubuntu2.15	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	php8.1@8.1.2-1ubuntu2.3	8.1.2-1ubuntu2.8	1