CVE-2024-1597
CriticalAdvisory
Published 21 Feb 2024In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 10.0
- base score, highest
- EPSS
- 0.048
- 91st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 194
- of 17,781 indexed, latest versions
- Container images
- 124
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
pgjdbc SQL Injection via line comment generation
Carried by container images the latest versions of 194 of 17,781 indexed charts deploy, on 124 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| postgresqlmaven | 9.4.1208.jre7, 9.4.1209.jre7, 9.4.1211, 42.0.0+35 more | 42.2.28, 42.3.9, 42.4.4, 42.5.5+1 more | 124 |
| PostgreSQL JDBC Driverbitnami | 42.6.0 | 42.2.28 | 1 |
Charts affected
194 by stars
Container images carrying it
124 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| folioci/ | 1b57d690d568 | postgresql | 42.2.28 | 1 |
| geonetwork/ | 20c9bb761f67 | postgresql | 42.2.28 | 1 |
| geoservercloud/ | 5dc0c93a1710 | postgresql | 42.2.28 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | postgresql | 42.2.28 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | postgresql | 42.2.28 | 1 |
| geoservercloud/ | 8c70ee06d5ab | postgresql | 42.2.28 | 1 |
| geoservercloud/ | 42775ba6a4da | postgresql | 42.2.28 | 1 |
| jingking/ | 43e74ab234e1 | postgresql | 42.3.9 | 1 |
| library/ | 0ae5169e3d0f | postgresql | 42.2.28 | 1 |
| library/ | 7e43ff493a47 | postgresql | 42.2.28 | 1 |
| library/ | 88cd63154d4b | postgresql | 42.2.28 | 1 |
| library/ | a246bc64207e | postgresql | 42.2.28 | 1 |
| library/ | a9bc5a3a1fc3 | postgresql | 42.2.28 | 1 |
| library/ | eb2f0be32efd | postgresql | 42.3.9 | 1 |
| library/ | ef9723cf4fe4 | postgresql | 42.5.5 | 1 |
| lsmaster/ | 061eb5fbfa00 | postgresql | 42.2.28 | 1 |
| maksimkavalenka/ | 13ad9bb170a0 | postgresql | 42.6.1 | 1 |
| maksimkavalenka/ | 2bcdac368b07 | postgresql | 42.6.1 | 1 |
| metabase/ | ffb2dccacefc | postgresql | 42.2.28 | 1 |
| ncsa/ | af6649d59150 | postgresql | 42.4.4 | 1 |
| openkm/ | 3bc465a7461b | postgresql | 42.2.28 | 1 |
| owasp/ | efc65e702ee1 | postgresql | 42.2.28 | 1 |
| pmoscode/ | a58f4d762f5c | postgresql PostgreSQL JDBC Driver | 42.5.5 42.2.28 | 1 |
| redestroyder/ | 740364a619fd | postgresql | 42.3.9 | 1 |
| redestroyder/ | db03499a0726 | postgresql | 42.3.9 | 1 |
| remche/ | 8bcda8a04d3b | postgresql | 42.2.28 | 1 |
| reportportal/ | 9df41f8fb320 | postgresql | 42.2.28 | 1 |
| reportportal/ | 9e73114dbd15 | postgresql | 42.2.28 | 1 |
| reportportal/ | dc166c58485a | postgresql | 42.2.28 | 1 |
| rundeck/ | 4d64fe56f767 | postgresql | 42.2.28 | 1 |
| rundeck/ | b13e8059ad72 | postgresql | 42.2.28 | 1 |
| scorpiobroker/ | db55012043df | postgresql | 42.3.9 | 1 |
| sdandey/ | bef0f599737b | postgresql | 42.2.28 | 1 |
| seataio/ | 703b5de7f1a6 | postgresql | 42.3.9 | 1 |
| seataio/ | ee1ed55f4144 | postgresql | 42.2.28 | 1 |
| signald/ | 0ffad7ccc2eb | postgresql | 42.3.9 | 1 |
| signald/ | edbff058278c | postgresql | 42.5.5 | 1 |
| sismics/ | f4b0ef019cf1 | postgresql | 42.2.28 | 1 |
| slamdev/ | b4b029c9b15f | postgresql | 42.2.28 | 1 |
| slamdev/ | 3ca20c184c55 | postgresql | 42.2.28 | 1 |
| snowplow/ | 5a38033f07c1 | postgresql | 42.5.5 | 1 |
| sonatype/ | 586060431b64 | postgresql | 42.6.1 | 1 |
| sslhep/ | 9e80af083079 | postgresql | 42.2.28 | 1 |
| svtechnmaa/ | 6e368ace0977 | postgresql | 42.3.9 | 1 |
| thelastpickle/ | 9c53996c457d | postgresql | 42.2.28 | 1 |
| thingsboard/ | 645f43b688f7 | postgresql | 42.2.28 | 1 |
| thingsboard/ | f40a542832c4 | postgresql | 42.5.5 | 1 |
| thmmniii/ | 86105349c1a3 | postgresql | 42.5.5 | 1 |
| treskon/ | 88e813f22347 | postgresql | 42.5.5 | 1 |
| trinodb/ | ee80ab5eeab2 | postgresql | 42.5.5 | 1 |