StackRadarChart IndexLive demo

CVE-2023-50164

Critical

Advisory

Published 7 Dec 2023In the index since 8 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.808; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2; of 17,781 indexed, latest versions
Container images: 2; deployed by those charts
Fix available: 1 of 1; affected package

Apache Struts vulnerable to path traversal

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
struts2-coremaven	2.5.30, 2.5.32-atlassian-1	2.5.33	2

OSV records: GHSA-2j39-qcjm-428w

Charts affected

2 by stars

Chart

Latest

Affected images

Radar Score

akto-testing-db-layerakto

1 of 2 See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2023-50164.

Container image	Digest	Package	Fixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.59.3_local	8cdcb7e83f9f	struts2-core@2.5.30	2.5.33

Open the chart page →

5,489

1 of 3 See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2023-50164.

Container image	Digest	Package	Fixed in
atlassian/crowd :5.2.2	ebf761c7d437	struts2-core@2.5.32-atlassian-1	2.5.33

Open the chart page →

5,663

Container images carrying it

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
atlassian/crowd :5.2.2	ebf761c7d437	struts2-core@2.5.32-atlassian-1	2.5.33	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.59.3_local	8cdcb7e83f9f	struts2-core@2.5.30	2.5.33	1