CVE-2023-32697
HighAdvisory
Published 23 May 2023In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.016
- 74th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 118
- of 17,781 indexed, latest versions
- Container images
- 37
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled
Carried by container images the latest versions of 118 of 17,781 indexed charts deploy, on 37 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| sqlite-jdbcmaven | 3.7.2, 3.8.11.2, 3.21.0.1, 3.23.1+10 more | 3.41.2.2 | 37 |
- OSV records
- GHSA-6phf-6h5g-97j2
Charts affected
118 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| pagesronan-pages | 1.0.0 | 1 of 3See more | 20,190 |
| pagessamanvithkaranth | 1.0.0 | 1 of 3See more | 20,190 |
| pagessarubits-pages | 1.0.0 | 1 of 3See more | 20,190 |
| pagessekharpkube | 1.0.0 | 1 of 3See more | 20,190 |
| pagesshrutiujlan-pages | 1.0.0 | 1 of 3See more | 20,190 |
| atlassian-jirasomeblackmagic | 3.3.2 | 1 of 1See more | 13,079 |
| pagessrinipages | 1.0.0 | 1 of 3See more | 20,190 |
| cerebrostakaterVerified publisher | 0.5.1 | 1 of 2See more | 2,956 |
| pagesstephendillondell | 1.0.0 | 1 of 3See more | 20,190 |
| pagessunilb2590-pages | 1.0.0 | 1 of 3See more | 20,190 |
| pagestest4322 | 1.0.0 | 1 of 3See more | 20,190 |
| pagesthiru-pages | 1.0.0 | 1 of 3See more | 20,190 |
| pagesthuy-pages | 1.0.0 | 1 of 3See more | 20,190 |
| pagesvictor-pages | 1.0.0 | 1 of 3See more | 20,190 |
| pageswalter | 1.0.0 | 1 of 3See more | 20,190 |
| drillwearefrank | 1.3.6 | 1 of 3See more | 9,397 |
| opendistro-eswitcom-gmbh | 1.13.3 | 1 of 3See more | 5,806 |
| zahori-serverzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,846 |
Container images carrying it
37 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flyway/ | 22d97ceb0c47 | sqlite-jdbc | 3.41.2.2 | 79 |
| lmenezes/ | 7d9e2b77e459 | sqlite-jdbc | 3.41.2.2 | 3 |
| supertokens/ | 18d34c781347 | sqlite-jdbc | 3.41.2.2 | 3 |
| amazon/ | 2acfa1dcc5f8 | sqlite-jdbc | 3.41.2.2 | 2 |
| geoservercloud/ | 99540eef78ad | sqlite-jdbc | 3.41.2.2 | 2 |
| geoservercloud/ | c687b1cbc891 | sqlite-jdbc | 3.41.2.2 | 2 |
| geoservercloud/ | 5288f320cf36 | sqlite-jdbc | 3.41.2.2 | 2 |
| geoservercloud/ | a30a60ac6cd0 | sqlite-jdbc | 3.41.2.2 | 2 |
| metabase/ | 1fb334ce4820 | sqlite-jdbc | 3.41.2.2 | 2 |
| opensearchproject/ | 4254021a8c71 | sqlite-jdbc | 3.41.2.2 | 2 |
| opensearchproject/ | 967d7f57f72f | sqlite-jdbc | 3.41.2.2 | 2 |
| amazon/ | 6df71eb04639 | sqlite-jdbc | 3.41.2.2 | 1 |
| apache/ | 1f96558fd292 | sqlite-jdbc | 3.41.2.2 | 1 |
| assistiot/ | ba1d85ec3739 | sqlite-jdbc | 3.41.2.2 | 1 |
| atlassian/ | 37bc46cbec1a | sqlite-jdbc | 3.41.2.2 | 1 |
| atlassian/ | 64a75aa4ec4e | sqlite-jdbc | 3.41.2.2 | 1 |
| bbernhard/ | 549ad08d7e14 | sqlite-jdbc | 3.41.2.2 | 1 |
| duck1123/ | 119fc5d4cbfb | sqlite-jdbc | 3.41.2.2 | 1 |
| easypi/ | d2950a36a576 | sqlite-jdbc | 3.41.2.2 | 1 |
| flyway/ | 45b5d7cdc75a | sqlite-jdbc | 3.41.2.2 | 1 |
| flyway/ | 80f12c80502b | sqlite-jdbc | 3.41.2.2 | 1 |
| geoservercloud/ | 5dc0c93a1710 | sqlite-jdbc | 3.41.2.2 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | sqlite-jdbc | 3.41.2.2 | 1 |
| geoservercloud/ | 8c70ee06d5ab | sqlite-jdbc | 3.41.2.2 | 1 |
| geoservercloud/ | 42775ba6a4da | sqlite-jdbc | 3.41.2.2 | 1 |
| ladeit/ | 962b665ffe82 | sqlite-jdbc | 3.41.2.2 | 1 |
| lmenezes/ | 3e860068e403 | sqlite-jdbc | 3.41.2.2 | 1 |
| lmenezes/ | 6684131caf5f | sqlite-jdbc | 3.41.2.2 | 1 |
| lsmaster/ | 061eb5fbfa00 | sqlite-jdbc | 3.41.2.2 | 1 |
| ma1uta/ | ee2a56d8b8ca | sqlite-jdbc | 3.41.2.2 | 1 |
| magento/ | 59fb6f0f1461 | sqlite-jdbc | 3.41.2.2 | 1 |
| metabase/ | 9ebdc664a6b2 | sqlite-jdbc | 3.41.2.2 | 1 |
| metabase/ | ffb2dccacefc | sqlite-jdbc | 3.41.2.2 | 1 |
| signald/ | 0ffad7ccc2eb | sqlite-jdbc | 3.41.2.2 | 1 |
| signald/ | edbff058278c | sqlite-jdbc | 3.41.2.2 | 1 |
| wistefan/ | e0887302b2d8 | sqlite-jdbc | 3.41.2.2 | 1 |
| quay.io/ | 93889c3d8a34 | sqlite-jdbc | 3.41.2.2 | 1 |