CVE-2023-20862
MediumAdvisory
Published 19 Apr 2023In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.006
- 49th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 15
- of 17,781 indexed, latest versions
- Container images
- 16
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Spring Security logout not clearing security context
Carried by container images the latest versions of 15 of 17,781 indexed charts deploy, on 16 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| spring-security-coremaven | 5.7.1, 5.7.2, 5.7.3, 5.7.4+3 more | 5.7.8 | 16 |
- OSV records
- GHSA-x873-6rgc-94jc
Charts affected
15 by stars
Container images carrying it
16 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apimap/ | ae2b3ab00177 | spring-security-core | 5.7.8 | 1 |
| assistiot/ | e4414cb72dc4 | spring-security-core | 5.7.8 | 1 |
| dannielkil/ | e3b479a55a69 | spring-security-core | 5.7.8 | 1 |
| fimperato/ | 6441f6545613 | spring-security-core | 5.7.8 | 1 |
| gresearchdev/ | 91863a50afb7 | spring-security-core | 5.7.8 | 1 |
| gresearchdev/ | 8dad36a05ebf | spring-security-core | 5.7.8 | 1 |
| jhipster/ | 7184525acd4d | spring-security-core | 5.7.8 | 1 |
| thingsboard/ | 645f43b688f7 | spring-security-core | 5.7.8 | 1 |
| thingsboard/ | f40a542832c4 | spring-security-core | 5.7.8 | 1 |
| vlebediantsev/ | 10393a89b4a8 | spring-security-core | 5.7.8 | 1 |
| vlebediantsev/ | df8bf38c535b | spring-security-core | 5.7.8 | 1 |
| vlebediantsev/ | 427af418b75e | spring-security-core | 5.7.8 | 1 |
| vlebediantsev/ | 9319437f3c8f | spring-security-core | 5.7.8 | 1 |
| zahoriaut/ | b2de13916f3e | spring-security-core | 5.7.8 | 1 |
| zbalogh/ | 7c247e399a1f | spring-security-core | 5.7.8 | 1 |
| ghcr.io/ | 8368359c8dd0 | spring-security-core | 5.7.8 | 1 |