CVE-2022-31690
HighAdvisory
Published 1 Nov 2022In the index since 8 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.011
- 63rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 16
- of 17,781 indexed, latest versions
- Container images
- 24
- deployed by those charts
- Fix available
- 1 of 1
- affected package
spring-security-oauth2-client vulnerable to Privilege Escalation
Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 24 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| spring-security-oauth2-clientmaven | 5.2.2.RELEASE, 5.3.4.RELEASE, 5.3.10.RELEASE, 5.4.5+7 more | 5.6.9, 5.7.5 | 24 |
- OSV records
- GHSA-32vj-v39g-jh23
Charts affected
16 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| shinyproxyremche | 0.6.6 | 1 of 2See more | 3,958 |
| shenyuerdeng | 2.4.21 | 1 of 2See more | 12,513 |
| scorpio-brokerfiware | 0.3.3 | 9 of 10See more | 55,600 |
| scorpiobrokerfiware | 0.1.2 | 9 of 10See more | 55,600 |
| scorpio-broker-aaiofiware | 0.4.15 | 1 of 1See more | 5,286 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 9,122 |
| elastictranscoderluiscajl | 0.46.0 | 3 of 4See more | 58,160 |
| lavandaluiscajl | 0.0.134 | 3 of 5See more | 18,248 |
| reportportalreportportal | 5.7.2 | 1 of 8See more | 25,737 |
| shenyushenyu | 0.6.3 | 1 of 2See more | 8,804 |
| shenyushenyu-helm-chart-test | 2.4.27 | 1 of 2See more | 12,513 |
| sistas-chatbotsistas-chatbot | 5.0.2 | 1 of 6See more | 5,856 |
| shenyutest-helm | 2.4.21 | 1 of 2See more | 12,513 |
| thingsboardthingsboardVerified publisher | 0.1.3 | 1 of 12See more | 25,394 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,364 |
| webhookie-allwebhookie | 0.1.2 | 1 of 3See more | 28,605 |
Container images carrying it
24 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | 0bd3b25c4be4 | spring-security-oauth2-client | 5.6.9 | 3 |
| hookiesolutions/ | 0629694246ba | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | 01e11d800459 | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | 3f05a113a4be | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | 5073ceef2fa0 | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | 62dae3dd0eeb | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | a2cfcf0947fd | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | b742a53b2803 | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | b7fe27a06ff5 | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | e08036670d66 | spring-security-oauth2-client | 5.6.9 | 2 |
| scorpiobroker/ | f02e8a429a08 | spring-security-oauth2-client | 5.6.9 | 2 |
| apache/ | 1bd5756f6273 | spring-security-oauth2-client | 5.6.9 | 1 |
| dannielkil/ | e3b479a55a69 | spring-security-oauth2-client | 5.7.5 | 1 |
| elastictranscoder/ | 963ab3858c6b | spring-security-oauth2-client | 5.6.9 | 1 |
| elastictranscoder/ | 26208b8c2359 | spring-security-oauth2-client | 5.6.9 | 1 |
| elastictranscoder/ | 5b75d19e2733 | spring-security-oauth2-client | 5.6.9 | 1 |
| jhipster/ | 7184525acd4d | spring-security-oauth2-client | 5.7.5 | 1 |
| lavandadelpatio/ | 94e225a5a6f8 | spring-security-oauth2-client | 5.6.9 | 1 |
| lavandadelpatio/ | 92de3c3426d2 | spring-security-oauth2-client | 5.6.9 | 1 |
| lavandadelpatio/ | 71f2ccec8c0d | spring-security-oauth2-client | 5.6.9 | 1 |
| remche/ | 8bcda8a04d3b | spring-security-oauth2-client | 5.6.9 | 1 |
| reportportal/ | 9e73114dbd15 | spring-security-oauth2-client | 5.6.9 | 1 |
| scorpiobroker/ | db55012043df | spring-security-oauth2-client | 5.6.9 | 1 |
| thingsboard/ | 645f43b688f7 | spring-security-oauth2-client | 5.7.5 | 1 |