StackRadar

CVE-2023-20873

Critical

Advisory

Published 20 Apr 2023In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
162
of 17,781 indexed, latest versions
Container images
113
deployed by those charts
Fix available
1 of 1
affected package

Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry

Carried by container images the latest versions of 162 of 17,781 indexed charts deploy, on 113 images.

Affected packageAffected versionsFixed inImages
spring-boot-actuator-autoconfiguremaven2.0.2.RELEASE, 2.0.4.RELEASE, 2.1.1.RELEASE, 2.1.3.RELEASE+36 more2.5.15, 2.6.15, 2.7.11, 3.0.6113
OSV records
GHSA-g5h3-w546-pj7f

Charts affected

162 by stars
ChartLatestAffected imagesRadar Score
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
spring-boot-actuator-autoconfigure@2.6.6
2.6.15

Open the chart page →

8,943
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
spring-boot-actuator-autoconfigure@2.4.6
2.5.15

Open the chart page →

12,581
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

17,702
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
spring-boot-actuator-autoconfigure@2.3.8.RELEASE
2.5.15

Open the chart page →

34,754
siembolgresearch0.1.62 of 4See more

siembol gresearch 0.1.6

2 of the 4 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
spring-boot-actuator-autoconfigure@2.7.5
2.7.11
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
spring-boot-actuator-autoconfigure@2.7.5
2.7.11

Open the chart page →

14,312
nacosheidaodageshiwoVerified publisher0.1.51 of 1See more

nacos heidaodageshiwo 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
spring-boot-actuator-autoconfigure@2.1.17.RELEASE
2.5.15

Open the chart page →

3,978
helm-airportshelm-airports0.1.03 of 7See more

helm-airports helm-airports 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dina1993/airports-api:latestac731244aed1
spring-boot-actuator-autoconfigure@3.0.5
3.0.6
dina1993/airports-consumer:latest669d146a5e63
spring-boot-actuator-autoconfigure@3.0.5
3.0.6
dina1993/airports-producer:latest3d6b0dac1cb4
spring-boot-actuator-autoconfigure@3.0.5
3.0.6

Open the chart page →

12,696
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
springboothelmcharts1.0.01 of 1See more

springboot helmcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
kimb88/hello-world-spring-boot:latest0639155241cb
spring-boot-actuator-autoconfigure@2.0.4.RELEASE
2.5.15

Open the chart page →

6,451
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
apache/skywalking-ui:9.2.0295f1dc87d98
spring-boot-actuator-autoconfigure@2.6.6
2.6.15

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.9.180530f0308a5
spring-boot-actuator-autoconfigure@2.4.8
2.5.15

Open the chart page →

20,650
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
spring-boot-actuator-autoconfigure@2.4.2
2.5.15

Open the chart page →

1,703
xxl-job-adminjoelee2012Verified publisher1.1.01 of 2See more

xxl-job-admin joelee2012 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
xuxueli/xxl-job-admin:2.4.0640093c35fd6
spring-boot-actuator-autoconfigure@2.7.9
2.7.11

Open the chart page →

3,127
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
spring-boot-actuator-autoconfigure@2.1.6.RELEASE
2.5.15

Open the chart page →

7,498
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
spring-boot-actuator-autoconfigure@2.4.0
2.5.15

Open the chart page →

8,884
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
kubebb/gateway-api:v5.6.04d062f20309c
spring-boot-actuator-autoconfigure@2.7.4
2.7.11

Open the chart page →

4,664
tapm-componentkubebb5.7.12 of 3See more

tapm-component kubebb 5.7.1

2 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
spring-boot-actuator-autoconfigure@2.3.2.RELEASE
2.5.15
refar/apm-operator-server:v5.7.1e5490f050f9f
spring-boot-actuator-autoconfigure@2.3.2.RELEASE
2.5.15

Open the chart page →

10,264
nacoskubesphere-testVerified publisher0.1.11 of 1See more

nacos kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
nacos/nacos-server:1.4.1fe6e5688cdf3
spring-boot-actuator-autoconfigure@2.1.17.RELEASE
2.5.15

Open the chart page →

4,153
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
ladeit/ladeit:latest962b665ffe82
spring-boot-actuator-autoconfigure@2.1.1.RELEASE
2.5.15

Open the chart page →

26,356
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
spring-boot-actuator-autoconfigure@2.5.1
2.5.15
elastictranscoder/media-storage:f6d861a026208b8c2359
spring-boot-actuator-autoconfigure@2.5.1
2.5.15
elastictranscoder/transcoder:627e21dcb4a0327029e6
spring-boot-actuator-autoconfigure@2.5.1
2.5.15
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
spring-boot-actuator-autoconfigure@2.5.1
2.5.15

Open the chart page →

58,160
lavandaluiscajl0.0.1344 of 5See more

lavanda luiscajl 0.0.134

4 of the 5 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
spring-boot-actuator-autoconfigure@2.3.4.RELEASE
2.5.15
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
spring-boot-actuator-autoconfigure@2.3.4.RELEASE
2.5.15
lavandadelpatio/filebot:0.0.671f2ccec8c0d
spring-boot-actuator-autoconfigure@2.4.4
2.5.15
lavandadelpatio/tmdb:0.0.2f36af885e915
spring-boot-actuator-autoconfigure@2.4.4
2.5.15

Open the chart page →

18,248
torznab-atomohdluiscajl0.0.31 of 1See more

torznab-atomohd luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
lavandadelpatio/torznab-atomohd:latest214eaef5444c
spring-boot-actuator-autoconfigure@3.0.5
3.0.6

Open the chart page →

3,290
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
spring-boot-actuator-autoconfigure@2.0.2.RELEASE
2.5.15

Open the chart page →

15,855
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
spring-boot-actuator-autoconfigure@2.7.4
2.7.11

Open the chart page →

8,928
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
bpjstk-serviceopenshift1.0.04 of 6See more

bpjstk-service openshift 1.0.0

4 of the 6 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
andrianrf/bpjstk-service:latest46abe878d9d8
spring-boot-actuator-autoconfigure@2.3.4.RELEASE
2.5.15
andrianrf/bpjstk-simulator:latestb63fdb51d39d
spring-boot-actuator-autoconfigure@2.3.4.RELEASE
2.5.15
andrianrf/iso-client:latestba560086ce15
spring-boot-actuator-autoconfigure@2.3.4.RELEASE
2.5.15
andrianrf/iso-server:latest7da47f525c7d
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

34,671
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
spring-boot-actuator-autoconfigure@2.6.6
2.6.15

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
spring-boot-actuator-autoconfigure@2.6.6
2.6.15

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
spring-boot-actuator-autoconfigure@2.6.6
2.6.15

Open the chart page →

13,551
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
spring-boot-actuator-autoconfigure@2.6.6
2.6.15

Open the chart page →

13,100
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
spring-boot-actuator-autoconfigure@2.1.9.RELEASE
2.5.15

Open the chart page →

26,339
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-20873.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15

Open the chart page →

20,190

Container images carrying it

113 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
someblackmagic/smtp-fake-server:latest0d63ba37a560
spring-boot-actuator-autoconfigure@2.4.1
2.5.15
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
spring-boot-actuator-autoconfigure@2.7.0
2.7.11
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
spring-boot-actuator-autoconfigure@2.7.0
2.7.11
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
spring-boot-actuator-autoconfigure@2.7.0
2.7.11
1
thingsboard/tb-node:3.4.1645f43b688f7
spring-boot-actuator-autoconfigure@2.7.0
2.7.11
1
thingsboard/tb-node:3.6.0f40a542832c4
spring-boot-actuator-autoconfigure@2.7.10
2.7.11
1
xuxueli/xxl-job-admin:2.4.0640093c35fd6
spring-boot-actuator-autoconfigure@2.7.9
2.7.11
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
spring-boot-actuator-autoconfigure@2.7.8
2.7.11
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
spring-boot-actuator-autoconfigure@2.2.4.RELEASE
2.5.15
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
spring-boot-actuator-autoconfigure@2.3.1.RELEASE
2.5.15
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
spring-boot-actuator-autoconfigure@2.7.4
2.7.11
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
spring-boot-actuator-autoconfigure@2.7.7
2.7.11
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
spring-boot-actuator-autoconfigure@2.7.7
2.7.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.