StackRadar

CVE-2019-10241

Medium

Advisory

Published 23 Apr 2019In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.096
95th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
67
of 17,781 indexed, latest versions
Container images
58
deployed by those charts
Fix available
1 of 1
affected package

Cross-site Scripting in Eclipse Jetty

Carried by container images the latest versions of 67 of 17,781 indexed charts deploy, on 58 images.

Affected packageAffected versionsFixed inImages
jetty-servermaven7.6.0.v20120127, 8.1.7.v20120910, 8.1.9.v20130131, 8.1.12.v20130726+21 more9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v2019041158
OSV records
GHSA-7vx9-xjhr-rw6h

Charts affected

67 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jetty-server@9.3.24.v20180605
9.3.26.v20190403
dbanda/spark:2.4.6d0e6367876ae
jetty-server@9.3.24.v20180605
9.3.26.v20190403

Open the chart page →

13,738
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
jetty-server@9.4.12.v20180830
9.4.16.v20190411

Open the chart page →

11,782
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
jetty-server@8.1.15.v20140411
9.2.27.v20190403

Open the chart page →

8,636
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
jetty-server@9.3.20.v20170531
9.3.26.v20190403

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.2.27.v20190403

Open the chart page →

7,948
hivedmwm-bigdataVerified publisher0.1.63 of 5See more

hive dmwm-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.2.27.v20190403
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-server@9.2.5.v20141112
9.2.27.v20190403
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.2.27.v20190403

Open the chart page →

20,837
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jetty-server@9.3.20.v20170531
9.3.26.v20190403

Open the chart page →

7,335
dynamodbkeyporttech0.1.271 of 2See more

dynamodb keyporttech 0.1.27

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
amazon/dynamodb-local:1.12.08414d80019b0
jetty-server@8.1.12.v20130726
9.2.27.v20190403

Open the chart page →

1,304
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jetty-server@9.2.5.v20141112
9.2.27.v20190403

Open the chart page →

8,198
ignitecloudnativeapp1.0.01 of 1See more

ignite cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
apacheignite/ignite:2.7.0d7deab68b8fa
jetty-server@9.3.20.v20170531
9.3.26.v20190403

Open the chart page →

7,891
hbasedmwm-bigdataVerified publisher0.1.62 of 5See more

hbase dmwm-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.26.v20190403
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.2.27.v20190403

Open the chart page →

13,392
hive-metastoredmwm-bigdataVerified publisher0.1.31 of 2See more

hive-metastore dmwm-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.2.27.v20190403

Open the chart page →

6,882
opentsdbdmwm-bigdataVerified publisher0.1.72 of 6See more

opentsdb dmwm-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.26.v20190403
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.2.27.v20190403

Open the chart page →

17,511
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
jetty-server@9.4.15.v20190215
9.4.16.v20190411

Open the chart page →

11,553
hbasegradiant-bigdataVerified publisher0.1.62 of 5See more

hbase gradiant-bigdata 0.1.6

2 of the 5 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.26.v20190403
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.2.27.v20190403

Open the chart page →

13,392
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
jetty-server@9.4.14.v20181114
9.4.16.v20190411

Open the chart page →

6,165
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
jetty-server@9.4.8.v20171121
9.4.16.v20190411

Open the chart page →

2,406
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
jetty-server@9.4.15.v20190215
9.4.16.v20190411

Open the chart page →

11,553
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
jetty-server@9.4.11.v20180605
9.4.16.v20190411

Open the chart page →

7,936
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
jetty-server@9.4.11.v20180605
9.4.16.v20190411

Open the chart page →

12,018
cassandra-reapercloudnativeapp0.2.01 of 1See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-server@9.4.6.v20170531
9.4.16.v20190411

Open the chart page →

5,078
gocdcloudnativeapp1.9.21 of 2See more

gocd cloudnativeapp 1.9.2

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
gocd/gocd-server:v19.3.02da45cb09d57
jetty-server@9.4.14.v20181114
9.4.16.v20190411

Open the chart page →

9,144
metabasecloudnativeapp0.5.01 of 1See more

metabase cloudnativeapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
metabase/metabase:v0.31.2ffb2dccacefc
jetty-server@9.4.11.v20180605
9.4.16.v20190411

Open the chart page →

4,601
neo4jcloudnativeapp1.0.01 of 1See more

neo4j cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
library/neo4j:3.4.5-enterprisea1ba477fa412
jetty-server@9.4.11.v20180605
9.4.16.v20190411

Open the chart page →

2,837
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
jetty-server@9.4.8.v20171121
9.4.16.v20190411

Open the chart page →

7,226
prometheus-cloudwatch-exportercloudnativeapp0.4.51 of 1See more

prometheus-cloudwatch-exporter cloudnativeapp 0.4.5

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:cloudwatch_exporter-0.5.0923705b2ae77
jetty-server@8.1.7.v20120910
9.2.27.v20190403

Open the chart page →

2,629
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
jetty-server@8.1.15.v20140411
9.2.27.v20190403

Open the chart page →

23,665
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
jetty-server@9.4.12.v20180830
9.4.16.v20190411

Open the chart page →

11,782
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
jetty-server@9.3.24.v20180605
9.3.26.v20190403

Open the chart page →

14,066
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
jetty-server@9.4.11.v20180605
9.4.16.v20190411
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.16.v20190411

Open the chart page →

16,860
ldapd4nVerified publisher0.1.01 of 1See more

ldap d4n 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
dwimberger/ldap-ad-it:latest0c636e55eb82
jetty-server@8.1.9.v20130131
9.2.27.v20190403

Open the chart page →

1,657
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
jetty-server@9.3.24.v20180605
9.3.26.v20190403

Open the chart page →

6,147
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
jetty-server@9.4.12.v20180830
9.4.16.v20190411

Open the chart page →

11,782
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
library/neo4j:3.3.0d4eaa8484246
jetty-server@9.2.22.v20170606
9.2.27.v20190403

Open the chart page →

11,174
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jetty-server@9.3.11.v20160721
9.3.26.v20190403

Open the chart page →

5,639
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
jetty-server@8.1.15.v20140411
9.2.27.v20190403

Open the chart page →

19,802
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.82 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
jetty-server@9.4.11.v20180605
9.4.16.v20190411
jingking/geonetwork-hnap:4.2.843e74ab234e1
jetty-server@9.4.11.v20180605
9.4.16.v20190411

Open the chart page →

34,754
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
jetty-server@9.4.11.v20180605
9.4.16.v20190411

Open the chart page →

15,722
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.2.27.v20190403

Open the chart page →

7,073
hivegradiant-bigdataVerified publisher0.1.63 of 5See more

hive gradiant-bigdata 0.1.6

3 of the 5 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.2.27.v20190403
gradiant/hive:2.3.2-postgresql-metastoreaae4f8a21f8b
jetty-server@9.2.5.v20141112
9.2.27.v20190403
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.2.27.v20190403

Open the chart page →

20,837
hive-metastoregradiant-bigdataVerified publisher0.1.31 of 2See more

hive-metastore gradiant-bigdata 0.1.3

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
bde2020/hive:2.3.2-postgresql-metastore620267768985
jetty-server@7.6.0.v20120127
9.2.27.v20190403

Open the chart page →

6,882
opentsdbgradiant-bigdataVerified publisher0.1.72 of 6See more

opentsdb gradiant-bigdata 0.1.7

2 of the 6 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
gradiant/hbase-base:2.0.1a1ee6de94c04
jetty-server@9.3.19.v20170502
9.3.26.v20190403
marcelmay/hadoop-hdfs-fsimage-exporter:1.26292c0a41ffa
jetty-server@8.1.22.v20160922
9.2.27.v20190403

Open the chart page →

17,511
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
jetty-server@9.3.24.v20180605
9.3.26.v20190403

Open the chart page →

6,147
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
jetty-server@9.4.0.v20161208
9.4.16.v20190411

Open the chart page →

4,303
hapi-fhirhapi-fhirVerified publisher0.1.01 of 1See more

hapi-fhir hapi-fhir 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
polyakov/hapi-fhir-jpaserver-example:latestdbcef69146b8
jetty-server@8.1.15.v20140411
9.2.27.v20190403

Open the chart page →

6,362
ibm-kerify-devibm-charts1.0.01 of 1See more

ibm-kerify-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
jetty-server@9.4.11.v20180605
9.4.16.v20190411

Open the chart page →

8,221
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jetty-server@9.2.13.v20150730
9.2.27.v20190403

Open the chart page →

19,295
pinotinseefrlab0.2.01 of 2See more

pinot inseefrlab 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
apachepinot/pinot:latest-jdk110018bb04ced7
jetty-server@9.3.24.v20180605
9.3.26.v20190403

Open the chart page →

10,777
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
jetty-server@9.4.5.v20170502
9.4.16.v20190411

Open the chart page →

10,682
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2019-10241.

Container imageDigestPackageFixed in
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
jetty-server@9.4.10.v20180503
9.4.16.v20190411

Open the chart page →

15,855

Container images carrying it

58 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jetty-server@9.2.5.v20141112
9.2.27.v20190403
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
jetty-server@9.3.11.v20160721
9.3.26.v20190403
1
sslhep/hive-metastore:3.1.39e80af083079
jetty-server@9.3.20.v20170531
9.3.26.v20190403
1
thelastpickle/cassandra-reaper:1.3.09c53996c457d
jetty-server@9.4.6.v20170531
9.4.16.v20190411
1
trinodb/trino:405ee80ab5eeab2
jetty-server@9.3.24.v20180605
9.3.26.v20190403
1
xetusoss/archiva:v2.2.588f25242b9ee
jetty-server@8.1.7.v20120910
9.2.27.v20190403
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
jetty-server@9.4.12.v20180830
9.4.16.v20190411
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
jetty-server@9.4.11.v20180605
9.4.16.v20190411
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.