StackRadarChart IndexLive demo

CVE-2023-46749

Medium

Advisory

Published 15 Jan 2024In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.012; 66th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 15; deployed by those charts
Fix available: 1 of 1; affected package

Apache Shiro vulnerable to path traversal

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 15 images.

Affected package	Affected versions	Fixed in	Images
shiro-coremaven	1.2.3, 1.2.6, 1.4.0, 1.6.0+6 more	1.13.0	15

OSV records: GHSA-jc7h-c423-mpjc

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

neo4jneo4j-helm

1 of 1 See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	1.13.0

Open the chart page →

2,640

neo4j-communityequinor-charts

1 of 1 See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
library/neo4j :4.2.4	348e3f56faa2	shiro-core@1.7.1	1.13.0

Open the chart page →

2,751

omada-controllergeek-cookbook

1 of 1 See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	1.13.0

Open the chart page →

11,553

1 of 3 See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
graylog2/server :2.4.3-3	8ff28c66e6c1	shiro-core@1.4.0	1.13.0

Open the chart page →

8,063

omada-controllerandrelote-k8s

1 of 1 See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	1.13.0

Open the chart page →

11,553

axelor-open-suiteaxelor-open-suite

1 of 2 See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	shiro-core@1.9.1	1.13.0

Open the chart page →

9,722

cassandra-reapercloudnativeapp

1 of 1 See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	shiro-core@1.2.3	1.13.0

Open the chart page →

5,078

neo4jcloudnativeapp

1 of 1 See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
library/neo4j :3.4.5-enterprise	a1ba477fa412	shiro-core@1.4.0	1.13.0

Open the chart page →

2,837

shenyuerdeng

1 of 2 See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	1.13.0

Open the chart page →

12,513

my-chartfleet-web-app

1 of 6 See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
richardchesterwood/k8s-fleetman-queue :release2	f7f8d5951155	shiro-core@1.10.1	1.13.0

Open the chart page →

24,296

nexusjenkins-x

1 of 1 See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	shiro-core@1.6.0	1.13.0

Open the chart page →

12,856

ladeitladeit

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
ladeit/ladeit :latest	962b665ffe82	shiro-core@1.4.0	1.13.0

Open the chart page →

26,356

MINTmint

1 of 15 See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	shiro-core@1.2.6	1.13.0

Open the chart page →

43,341

neo4jneo4j-helm-old

1 of 1 See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	1.13.0

Open the chart page →

2,640

apache-knox-helmpfisterer-knox

1 of 1 See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
farberg/apache-knox-docker :1.6.1	4b4a22487394	shiro-core@1.7.0	1.13.0

Open the chart page →

6,237

shenyushenyu

1 of 2 See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.5.1	e2be712fc4f4	shiro-core@1.8.0	1.13.0

Open the chart page →

8,804

shenyushenyu-helm-chart-test

1 of 2 See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	1.13.0

Open the chart page →

12,513

sonatype-nexus3simcube

1 of 2 See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
sonatype/nexus3 :3.58.1	586060431b64	shiro-core@1.10.0	1.13.0

Open the chart page →

4,946

shenyutest-helm

1 of 2 See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-46749.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	1.13.0

Open the chart page →

12,513

Container images carrying it

15 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-core@1.7.0	1.13.0	3
library/neo4j :4.3.2-enterprise	56a9453c4064	shiro-core@1.7.1	1.13.0	2
mbentley/omada-controller :4.3	f4e682274bed	shiro-core@1.4.0	1.13.0	2
apache/shenyu-admin :2.5.1	e2be712fc4f4	shiro-core@1.8.0	1.13.0	1
farberg/apache-knox-docker :1.6.1	4b4a22487394	shiro-core@1.7.0	1.13.0	1
graylog2/server :2.4.3-3	8ff28c66e6c1	shiro-core@1.4.0	1.13.0	1
ladeit/ladeit :latest	962b665ffe82	shiro-core@1.4.0	1.13.0	1
library/neo4j :4.2.4	348e3f56faa2	shiro-core@1.7.1	1.13.0	1
library/neo4j :3.4.5-enterprise	a1ba477fa412	shiro-core@1.4.0	1.13.0	1
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	shiro-core@1.2.6	1.13.0	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	shiro-core@1.9.1	1.13.0	1
richardchesterwood/k8s-fleetman-queue :release2	f7f8d5951155	shiro-core@1.10.1	1.13.0	1
sonatype/nexus3 :3.58.1	586060431b64	shiro-core@1.10.0	1.13.0	1
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	shiro-core@1.2.3	1.13.0	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	shiro-core@1.6.0	1.13.0	1