CVE-2023-3247

Medium

Advisory

Published 13 Jun 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.3; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 3 of 3; affected packages

php7.3 - security update

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
php7.4deb	7.4.3-4ubuntu2.6, 7.4.3-4ubuntu2.12, 7.4.3-4ubuntu2.13, 7.4.3-4ubuntu2.15+4 more	7.4.3-4ubuntu2.19, 7.4.33-1+deb11u4	8
php8.1deb	8.1.2-1ubuntu2.3	8.1.2-1ubuntu2.13	1
php7.3deb	7.3.4-2, 7.3.11-1~deb10u1, 7.3.14-1~deb10u1, 7.3.31-1~deb10u1	7.3.31-1~deb10u4	4

OSV records: UBUNTU-CVE-2023-3247 DLA-3458-1 DSA-5424-1
Also known as: USN-6199-1

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

openldap-stack-hahelm-openldap

4.3.3

1 of 5 See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
osixia/phpldapadmin :0.9.0	d112b82be133	php7.3@7.3.11-1~deb10u1	7.3.31-1~deb10u4

Open the chart page →

5,919

zabbixcetic

3.1.3

1 of 5 See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	php8.1@8.1.2-1ubuntu2.3	8.1.2-1ubuntu2.13

Open the chart page →

33,725

openldaphelm-openldap

2.0.4

1 of 3 See more

openldap helm-openldap 2.0.4

1 of the 3 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
osixia/phpldapadmin :0.9.0	d112b82be133	php7.3@7.3.11-1~deb10u1	7.3.31-1~deb10u4

Open the chart page →

6,219

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	php7.4@7.4.3-4ubuntu2.13	7.4.3-4ubuntu2.19

Open the chart page →

18,509

zabbix-serveraekondratiev

1.0.6

1 of 4 See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	php7.4@7.4.3-4ubuntu2.6	7.4.3-4ubuntu2.19

Open the chart page →

30,668

passboltcnieg

1.1.17

1 of 2 See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	php7.4@7.4.25-1+deb11u1	7.4.33-1+deb11u4

Open the chart page →

3,543

piholesavepointsam

0.2.0

1 of 1 See more

pihole savepointsam 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
pihole/pihole :2023.05.0	b83258064f54	php7.4@7.4.33-1+deb11u3	7.4.33-1+deb11u4

Open the chart page →

1,048

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	php7.4@7.4.25-1+deb11u1	7.4.33-1+deb11u4

Open the chart page →

10,817

mailtrapdev-goodies

0.1.0

1 of 1 See more

mailtrap dev-goodies 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
eaudeweb/mailtrap :2.3	b8ad9b7e19bb	php7.3@7.3.4-2	7.3.31-1~deb10u4

Open the chart page →

2,508

openldapccowley

2.0.4

1 of 3 See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
osixia/phpldapadmin :0.9.0	d112b82be133	php7.3@7.3.11-1~deb10u1	7.3.31-1~deb10u4

Open the chart page →

6,219

openldapcsic-charts

0.1.1

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	php7.4@7.4.30-1+deb11u1	7.4.33-1+deb11u4

Open the chart page →

5,293

openldap-stack-haeclipse-aerios

4.1.2

1 of 4 See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
osixia/phpldapadmin :0.9.0	d112b82be133	php7.3@7.3.11-1~deb10u1	7.3.31-1~deb10u4

Open the chart page →

7,534

passboltg0dscookie

0.5.2

1 of 2 See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	php7.4@7.4.33-1+deb11u1	7.4.33-1+deb11u4

Open the chart page →

7,940

ldap-account-managergabibbo97

0.2.1

1 of 1 See more

ldap-account-manager gabibbo97 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :7.2	95533a96a4c1	php7.3@7.3.14-1~deb10u1	7.3.31-1~deb10u4

Open the chart page →

2,404

phppgadminkfirfer

0.1.12

1 of 1 See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	php7.4@7.4.3-4ubuntu2.15	7.4.3-4ubuntu2.19

Open the chart page →

10,248

fossologymidokura-community

0.2.2

1 of 2 See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
fossology/fossology :4.2.1	8bd1f22ba7bb	php7.3@7.3.31-1~deb10u1	7.3.31-1~deb10u4

Open the chart page →

3,294

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	php7.4@7.4.3-4ubuntu2.12	7.4.3-4ubuntu2.19

Open the chart page →

22,658

openldapopenldap

0.1.1

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	php7.4@7.4.30-1+deb11u1	7.4.33-1+deb11u4

Open the chart page →

5,293

openldap-havcnngr

1.0.0

1 of 3 See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-3247.

Container image	Digest	Package	Fixed in
osixia/phpldapadmin :0.9.0	d112b82be133	php7.3@7.3.11-1~deb10u1	7.3.31-1~deb10u4

Open the chart page →

5,514

Container images carrying it

13 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
osixia/phpldapadmin :0.9.0	d112b82be133	php7.3@7.3.11-1~deb10u1	7.3.31-1~deb10u4	5
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	php7.4@7.4.30-1+deb11u1	7.4.33-1+deb11u4	2
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	php7.4@7.4.25-1+deb11u1	7.4.33-1+deb11u4	2
eaudeweb/mailtrap :2.3	b8ad9b7e19bb	php7.3@7.3.4-2	7.3.31-1~deb10u4	1
fossology/fossology :4.2.1	8bd1f22ba7bb	php7.3@7.3.31-1~deb10u1	7.3.31-1~deb10u4	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	php7.4@7.4.3-4ubuntu2.15	7.4.3-4ubuntu2.19	1
ldapaccountmanager/lam :7.2	95533a96a4c1	php7.3@7.3.14-1~deb10u1	7.3.31-1~deb10u4	1
mediagis/nominatim :3.7	c15e941485ef	php7.4@7.4.3-4ubuntu2.12	7.4.3-4ubuntu2.19	1
passbolt/passbolt :3.9.0-2-ce-non-root	ec046e112d5c	php7.4@7.4.33-1+deb11u1	7.4.33-1+deb11u4	1
pihole/pihole :2023.05.0	b83258064f54	php7.4@7.4.33-1+deb11u3	7.4.33-1+deb11u4	1
snipe/snipe-it :v6.0.14	55fb7636a98c	php7.4@7.4.3-4ubuntu2.13	7.4.3-4ubuntu2.19	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	php7.4@7.4.3-4ubuntu2.6	7.4.3-4ubuntu2.19	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	php8.1@8.1.2-1ubuntu2.3	8.1.2-1ubuntu2.13	1