CVE-2022-42252

High

Advisory

Published 1 Nov 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.015; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 184; of 17,781 indexed, latest versions
Container images: 132; deployed by those charts
Fix available: 2 of 2; affected packages

Apache Tomcat may reject request containing invalid Content-Length header

Carried by container images the latest versions of 184 of 17,781 indexed charts deploy, on 132 images.

Affected package	Affected versions	Fixed in	Images
tomcat-embed-coremaven	8.5.4, 8.5.11, 8.5.14, 8.5.15+36 more	8.5.83, 9.0.68	130
tomcat-coyotemaven	9.0.40, 9.0.65	9.0.68	2

OSV records: GHSA-p22x-g9px-3945
Also known as: BIT-tomcat-2022-42252

Charts affected

184 by stars

Chart

Latest

Affected images

Radar Score

reportportalreportportal

5.7.2

3 of 8 See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
reportportal/service-api :5.7.2	9df41f8fb320	tomcat-embed-core@9.0.37	9.0.68
reportportal/service-authorization :5.7.0	9e73114dbd15	tomcat-embed-core@9.0.37	9.0.68
reportportal/service-jobs :5.7.2	dc166c58485a	tomcat-embed-core@9.0.43	9.0.68

Open the chart page →

25,737

pagesroccohiggins-pages

1.0.0

1 of 3 See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

pagesronan-pages

1.0.0

1 of 3 See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

nacossaber

0.1.11

1 of 1 See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
nacos/nacos-server :v2.1.0	dcf04549c6d7	tomcat-embed-core@9.0.38	9.0.68

Open the chart page →

3,978

pagessamanvithkaranth

1.0.0

1 of 3 See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

pagessarubits-pages

1.0.0

1 of 3 See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

pagessekharpkube

1.0.0

1 of 3 See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

seldon-core-oauth-gatewayseldon

0.3.1

1 of 2 See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
seldonio/apife :0.3.1	eea0d3f578ca	tomcat-embed-core@8.5.34	8.5.83

Open the chart page →

8,098

shenyushenyu

0.6.3

1 of 2 See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.5.1	e2be712fc4f4	tomcat-embed-core@9.0.63	9.0.68

Open the chart page →

8,804

shenyushenyu-helm-chart-test

2.4.27

1 of 2 See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	tomcat-embed-core@9.0.29	9.0.68

Open the chart page →

12,513

pagesshrutiujlan-pages

1.0.0

1 of 3 See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

hetzner-iroboslamdev

0.0.5

1 of 1 See more

hetzner-irobo slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
slamdev/hetzner-irobo :0.0.1	3ca20c184c55	tomcat-embed-core@9.0.53	9.0.68

Open the chart page →

3,754

atlassian-confluencesomeblackmagic

3.4.1

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	tomcat-coyote@9.0.40	9.0.68

Open the chart page →

13,605

smtp-fake-serversomeblackmagic

0.1.0

1 of 1 See more

smtp-fake-server someblackmagic 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
someblackmagic/smtp-fake-server :latest	0d63ba37a560	tomcat-embed-core@9.0.41	9.0.68

Open the chart page →

4,278

pagessrinipages

1.0.0

1 of 3 See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

umsappstacksimplify

1.0.0

1 of 3 See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp :1.0.0-mysqldb	41b45003c6b6	tomcat-embed-core@9.0.21	9.0.68

Open the chart page →

6,101

nordmart-reviewstakater

0.0.6

1 of 3 See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	tomcat-embed-core@9.0.65	9.0.68

Open the chart page →

11,554

nordmart-review-instancestakater

1.0.0

1 of 3 See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	tomcat-embed-core@9.0.65	9.0.68

Open the chart page →

11,554

sonarqubestakater

0.10.3

1 of 2 See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
library/sonarqube :6.7.6-community	0ae5169e3d0f	tomcat-embed-core@8.5.23	8.5.83

Open the chart page →

11,841

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	tomcat-embed-core@9.0.58	9.0.68

Open the chart page →

14,493

pagesstephendillondell

1.0.0

1 of 3 See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

streamastreama

1.0.1

1 of 2 See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
just1not2/streama :1.10.4	8a2305192dec	tomcat-embed-core@8.5.11	8.5.83

Open the chart page →

8,554

pagessunilb2590-pages

1.0.0

1 of 3 See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

pagestest4322

1.0.0

1 of 3 See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

shenyutest-helm

2.4.21

1 of 2 See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	tomcat-embed-core@9.0.29	9.0.68

Open the chart page →

12,513

thingsboardthingsboard

0.1.3

4 of 12 See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
thingsboard/tb-coap-transport :3.4.1	bd45a09d85d9	tomcat-embed-core@9.0.63	9.0.68
thingsboard/tb-http-transport :3.4.1	a06f53c5e2da	tomcat-embed-core@9.0.63	9.0.68
thingsboard/tb-mqtt-transport :3.4.1	030f316ce301	tomcat-embed-core@9.0.63	9.0.68
thingsboard/tb-node :3.4.1	645f43b688f7	tomcat-embed-core@9.0.63	9.0.68

Open the chart page →

25,394

pagesthiru-pages

1.0.0

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

pagesthuy-pages

1.0.0

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

pagesvictor-pages

1.0.0

1 of 3 See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

kube-monitoring-telegram-botviento-repository

1.0.0

1 of 1 See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
vientoprojects/kubernetes-monitoring-telegram-bot :latest	eb2a71531741	tomcat-embed-core@9.0.50	9.0.68

Open the chart page →

7,885

pageswalter

1.0.0

1 of 3 See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68

Open the chart page →

20,190

drillwearefrank

1.3.6

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	tomcat-embed-core@8.5.46	8.5.83

Open the chart page →

9,397

webapp-db-javawebapp-db-java-repo

0.1.0

1 of 2 See more

webapp-db-java webapp-db-java-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
arturisimo/webapp-db-java :v2	c95524e90b57	tomcat-embed-core@9.0.56	9.0.68

Open the chart page →

2,566

sonarqubewebencryptor

6.7.3

1 of 3 See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2022-42252.

Container image	Digest	Package	Fixed in
library/sonarqube :8.2-community	a246bc64207e	tomcat-embed-core@8.5.41	8.5.83

Open the chart page →

5,460

Container images carrying it

132 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	tomcat-embed-core@9.0.36	9.0.68	79
apache/shenyu-admin :2.4.2	e8b7c4ddd069	tomcat-embed-core@9.0.29	9.0.68	3
pavanelthepu/todo-api :1.0.2	f47658e3b24c	tomcat-embed-core@9.0.48	9.0.68	3
supertokens/supertokens-postgresql :3.14	18d34c781347	tomcat-embed-core@8.5.47	8.5.83	3
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	tomcat-embed-core@8.5.31	8.5.83	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	tomcat-embed-core@9.0.37	9.0.68	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	tomcat-embed-core@9.0.37	9.0.68	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	tomcat-embed-core@9.0.37	9.0.68	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	tomcat-embed-core@9.0.37	9.0.68	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	tomcat-embed-core@9.0.37	9.0.68	2
nacos/nacos-server :v2.1.0	dcf04549c6d7	tomcat-embed-core@9.0.38	9.0.68	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	tomcat-embed-core@9.0.65	9.0.68	2
scorpiobroker/scorpio :RegistrySubscriptionManager_2.1.0	01e11d800459	tomcat-embed-core@9.0.55	9.0.68	2
scorpiobroker/scorpio :eureka-server_2.1.0	3f05a113a4be	tomcat-embed-core@9.0.55	9.0.68	2
scorpiobroker/scorpio :AtContextServer_2.1.0	5073ceef2fa0	tomcat-embed-core@9.0.55	9.0.68	2
scorpiobroker/scorpio :gateway_2.1.0	62dae3dd0eeb	tomcat-embed-core@9.0.55	9.0.68	2
scorpiobroker/scorpio :RegistryManager_2.1.0	a2cfcf0947fd	tomcat-embed-core@9.0.55	9.0.68	2
scorpiobroker/scorpio :QueryManager_2.1.0	b742a53b2803	tomcat-embed-core@9.0.55	9.0.68	2
scorpiobroker/scorpio :HistoryManager_2.1.0	b7fe27a06ff5	tomcat-embed-core@9.0.55	9.0.68	2
scorpiobroker/scorpio :config-server_1.1.0	c46c1517e523	tomcat-embed-core@9.0.26	9.0.68	2
scorpiobroker/scorpio :SubscriptionManager_2.1.0	e08036670d66	tomcat-embed-core@9.0.55	9.0.68	2
scorpiobroker/scorpio :EntityManager_2.1.0	f02e8a429a08	tomcat-embed-core@9.0.55	9.0.68	2
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	tomcat-embed-core@9.0.65	9.0.68	2
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	tomcat-embed-core@9.0.46	9.0.68	1
andrianrf/bpjstk-service :latest	46abe878d9d8	tomcat-embed-core@9.0.38	9.0.68	1
andrianrf/bpjstk-simulator :latest	b63fdb51d39d	tomcat-embed-core@9.0.38	9.0.68	1
andrianrf/iso-client :latest	ba560086ce15	tomcat-embed-core@9.0.38	9.0.68	1
andrianrf/iso-server :latest	7da47f525c7d	tomcat-embed-core@9.0.36	9.0.68	1
anguda/ant-media :2.5	c435285fc241	tomcat-embed-core@8.5.82	8.5.83	1
apache/drill :1.21.1	1f96558fd292	tomcat-embed-core@8.5.46	8.5.83	1
apache/iotdb :0.11.2	8647309f95d1	tomcat-embed-core@8.5.32	8.5.83	1
apache/rocketmq :5.3.0	434d8398f996	tomcat-embed-core@8.5.46	8.5.83	1
apache/rocketmq :4.9.3	5ac2a4e0f627	tomcat-embed-core@8.5.46	8.5.83	1
apacherocketmq/rocketmq-dashboard :1.0.0	24799aff6cf8	tomcat-embed-core@9.0.29	9.0.68	1
apache/shenyu-admin :2.5.1	e2be712fc4f4	tomcat-embed-core@9.0.63	9.0.68	1
apache/skywalking-ui :8.1.0	67d50e4deff4	tomcat-embed-core@8.5.29	8.5.83	1
arturisimo/webapp-db-java :v2	c95524e90b57	tomcat-embed-core@9.0.56	9.0.68	1
assistiot/tacticle_dashboard :api-latest	e4414cb72dc4	tomcat-coyote@9.0.65	9.0.68	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	tomcat-coyote@9.0.40	9.0.68	1
audig/clamapi :2.1.6	2c3fe34ee430	tomcat-embed-core@9.0.37	9.0.68	1
beastob/url-shortener :1.0.2	99a49885ab33	tomcat-embed-core@9.0.53	9.0.68	1
binhex/arch-nzbhydra2 :3.1.0-1-01	fb8952921ab6	tomcat-embed-core@9.0.36	9.0.68	1
chandanteekinavar/findery-market-order-service :1.0	0cf52bf5ee9a	tomcat-embed-core@9.0.53	9.0.68	1
choerodon/event-store-service :0.8.0	3c94c97f6f69	tomcat-embed-core@8.5.14	8.5.83	1
cnieg/gantt :1.1.2	d4b478d76f2a	tomcat-embed-core@9.0.65	9.0.68	1
dannielkil/book-backend :latest	e3b479a55a69	tomcat-embed-core@9.0.65	9.0.68	1
dellcloud/category :distributed	02fc234353a9	tomcat-embed-core@9.0.36	9.0.68	1
dellcloud/pages :1.0	4d2eb25b9225	tomcat-embed-core@9.0.43	9.0.68	1
dniel/forwardauth :latest	f67129ea1c64	tomcat-embed-core@9.0.21	9.0.68	1
elastictranscoder/media :627e21dc	963ab3858c6b	tomcat-embed-core@9.0.46	9.0.68	1