StackRadar

CVE-2022-4245

Medium

Advisory

Published 25 Sept 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
29
of 17,781 indexed, latest versions
Container images
29
deployed by those charts
Fix available
1 of 1
affected package

codehaus-plexus vulnerable to XML injection

Carried by container images the latest versions of 29 of 17,781 indexed charts deploy, on 29 images.

Affected packageAffected versionsFixed inImages
plexus-utilsmaven1.5.6, 1.5.8, 1.5.15, 2.0.4+7 more3.0.2429
OSV records
GHSA-jcwr-x25h-x5fh

Charts affected

29 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
plexus-utils@2.0.6
3.0.24

Open the chart page →

32,259
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
plexus-utils@3.0.22
3.0.24

Open the chart page →

10,530
hivedmwm-bigdataVerified publisher0.1.62 of 5See more

hive dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.24
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
plexus-utils@3.0.15
3.0.24

Open the chart page →

20,837
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
plexus-utils@3.0.15
3.0.24

Open the chart page →

8,198
geoserver-cloudcamptocamp20.0.52 of 11See more

geoserver-cloud camptocamp2 0.0.5

2 of the 11 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
plexus-utils@1.5.6
3.0.24
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
plexus-utils@1.5.6
3.0.24

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.62 of 11See more

geoserverCloud camptocamp2 0.0.6

2 of the 11 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
plexus-utils@1.5.6
3.0.24
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
plexus-utils@1.5.6
3.0.24

Open the chart page →

84,444
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.24

Open the chart page →

6,882
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
plexus-utils@3.0.22
3.0.24

Open the chart page →

8,752
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
plexus-utils@3.0.17
3.0.24

Open the chart page →

4,983
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
plexus-utils@3.0.17
3.0.24

Open the chart page →

15,970
geoservercamptocamp20.0.32 of 12See more

geoserver camptocamp2 0.0.3

2 of the 12 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
plexus-utils@1.5.6
3.0.24
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
plexus-utils@1.5.6
3.0.24

Open the chart page →

88,335
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
plexus-utils@2.0.6
3.0.24

Open the chart page →

7,226
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
plexus-utils@3.0
3.0.24

Open the chart page →

6,497
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
plexus-utils@2.0.6
3.0.24

Open the chart page →

16,860
mod-codex-ekbfolio-org0.1.341 of 1See more

mod-codex-ekb folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
folioci/mod-codex-ekb:latest235a3fa4adc9
plexus-utils@3.0.22
3.0.24

Open the chart page →

2,113
mod-copycatfolio-org0.1.31 of 1See more

mod-copycat folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
folioci/mod-copycat:latest1513fad2b799
plexus-utils@2.0.4
3.0.24

Open the chart page →

1,466
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
plexus-utils@3.0.22
3.0.24

Open the chart page →

6,988
hivegradiant-bigdataVerified publisher0.1.62 of 5See more

hive gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.24
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
plexus-utils@3.0.15
3.0.24

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.24

Open the chart page →

6,882
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
plexus-utils@1.5.15
3.0.24
ibmcom/microclimate-theia:lateste17bdccc5030
plexus-utils@2.0.5
3.0.24

Open the chart page →

57,669
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
plexus-utils@3.0.17
3.0.24

Open the chart page →

10,682
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
plexus-utils@2.0.6
3.0.24

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
plexus-utils@2.0.6
3.0.24

Open the chart page →

15,675
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
plexus-utils@3.0.17
3.0.24

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
plexus-utils@3.0.17
3.0.24

Open the chart page →

38,865
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
plexus-utils@1.5.8
3.0.24

Open the chart page →

26,339
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
plexus-utils@3.0.10
3.0.24

Open the chart page →

6,949
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
plexus-utils@3.0.15
3.0.24

Open the chart page →

6,907
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2022-4245.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
plexus-utils@2.0.6
3.0.24

Open the chart page →

11,841

Container images carrying it

29 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bde2020/hive:2.3.2-postgresql-metastore620267768985
plexus-utils@3.0.15
3.0.24
4
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
plexus-utils@1.5.6
3.0.24
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
plexus-utils@1.5.6
3.0.24
2
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
plexus-utils@3.0.15
3.0.24
2
apachepulsar/pulsar:2.10.03b262ab7a7d9
plexus-utils@2.0.6
3.0.24
1
apachepulsar/pulsar:2.6.14db6ff0b4045
plexus-utils@2.0.6
3.0.24
1
apachepulsar/pulsar:2.9.0d056c89b7131
plexus-utils@2.0.6
3.0.24
1
apachepulsar/pulsar:2.8.2d538416d5afe
plexus-utils@2.0.6
3.0.24
1
bivas/presto:0.19605545994f806
plexus-utils@2.0.6
3.0.24
1
folioci/mod-codex-ekb:latest235a3fa4adc9
plexus-utils@3.0.22
3.0.24
1
folioci/mod-copycat:latest1513fad2b799
plexus-utils@2.0.4
3.0.24
1
folioci/mod-marccat:latest1b57d690d568
plexus-utils@3.0.22
3.0.24
1
fonoster/routr:1.0.0-rc52ca65af17cbc
plexus-utils@3.0.17
3.0.24
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
plexus-utils@1.5.6
3.0.24
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
plexus-utils@1.5.6
3.0.24
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
plexus-utils@1.5.15
3.0.24
1
ibmcom/microclimate-theia:lateste17bdccc5030
plexus-utils@2.0.5
3.0.24
1
jenkinsci/jenkins:2.67a1f33f004659
plexus-utils@3.0.17
3.0.24
1
library/sonarqube:6.7.6-community0ae5169e3d0f
plexus-utils@2.0.6
3.0.24
1
muluder/prograncontrollermcord:0.1.843b597a93da7
plexus-utils@3.0.17
3.0.24
1
omecproject/onos-progran:1.0.05715e5648aa0
plexus-utils@3.0.17
3.0.24
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
plexus-utils@3.0.22
3.0.24
1
opsmx11/issuegen:v2.1.05c50ca123d88
plexus-utils@1.5.8
3.0.24
1
raykrueger/riemann:0.2.14c8baf3de57bb
plexus-utils@3.0
3.0.24
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
plexus-utils@3.0.15
3.0.24
1
wavefronthq/proxy:9.2d1064d28f6eb
plexus-utils@3.0.17
3.0.24
1
xetusoss/archiva:v2.2.588f25242b9ee
plexus-utils@3.0.15
3.0.24
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
plexus-utils@3.0.22
3.0.24
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
plexus-utils@3.0.10
3.0.24
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.