StackRadarChart IndexLive demo

CVE-2019-10241

Medium

Advisory

Published 23 Apr 2019In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.096; 95th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 67; of 17,781 indexed, latest versions
Container images: 58; deployed by those charts
Fix available: 1 of 1; affected package

Cross-site Scripting in Eclipse Jetty

Carried by container images the latest versions of 67 of 17,781 indexed charts deploy, on 58 images.

Affected package	Affected versions	Fixed in	Images
jetty-servermaven	7.6.0.v20120127, 8.1.7.v20120910, 8.1.9.v20130131, 8.1.12.v20130726+21 more	9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v20190411	58

OSV records: GHSA-7vx9-xjhr-rw6h

Charts affected

67 by stars

Chart

Latest

Affected images

Radar Score

MINTmint

1 of 15 See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	jetty-server@9.4.12.v20180830	9.4.16.v20190411

Open the chart page →

43,341

1 of 3 See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
atlassian/crowd :5.2.2	ebf761c7d437	jetty-server@8.1.15.v20140411	9.2.27.v20190403

Open the chart page →

5,663

1 of 3 See more

datawolf ncsa 1.1.0

1 of the 3 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
ncsa/datawolf :4.7.0	af6649d59150	jetty-server@9.2.2.v20140723	9.2.27.v20190403

Open the chart page →

4,989

1 of 18 See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
craigwillis/c2metadata-bd :latest	ae317d7e4724	jetty-server@9.2.10.v20150310	9.2.27.v20190403

Open the chart page →

55,726

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	jetty-server@8.1.17.v20150415	9.2.27.v20190403

Open the chart page →

88,546

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	jetty-server@8.1.17.v20150415	9.2.27.v20190403

Open the chart page →

38,865

jmxproxypndaproject

1 of 1 See more

jmxproxy pndaproject 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
gradiant/jmxproxy :3.4.0	45eceb1bc55c	jetty-server@9.4.8.v20171121	9.4.16.v20190411

Open the chart page →

4,177

hive-metastorepresto-loadbalancer

1 of 1 See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
datappeal/hive-metastore :latest	e38c085a3567	jetty-server@9.3.24.v20180605	9.3.26.v20190403

Open the chart page →

9,606

prometheus-cloudwatch-exporterprometheus-worawutchan

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-worawutchan 0.12.0

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :cloudwatch_exporter-0.8.0	fc4b9b9f5e15	jetty-server@9.4.15.v20190215	9.4.16.v20190411

Open the chart page →

2,831

archivaslamdev

1 of 2 See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
xetusoss/archiva :v2.2.5	88f25242b9ee	jetty-server@8.1.7.v20120910	9.2.27.v20190403

Open the chart page →

6,907

atlassian-jirasomeblackmagic

1 of 1 See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
atlassian/jira-software :8.14.0	37bc46cbec1a	jetty-server@8.1.15.v20140411	9.2.27.v20190403

Open the chart page →

13,079

newrelic-private-minionsstarcher

1 of 1 See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
quay.io/newrelic/synthetics-minion :2.2.21	98c26e1b8f70	jetty-server@9.4.11.v20180605	9.4.16.v20190411

Open the chart page →

3,164

trinostatcan

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	jetty-server@9.3.24.v20180605	9.3.26.v20190403

Open the chart page →

13,767

streamastreama

1 of 2 See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
just1not2/streama :1.10.4	8a2305192dec	jetty-server@8.1.15.v20140411	9.2.27.v20190403

Open the chart page →

8,554

ubooquityvhdirk

1 of 1 See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	jetty-server@9.4.0.v20161208	9.4.16.v20190411

Open the chart page →

4,303

queryservicewbstack

1 of 1 See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice :0.3.6_0.6	b83b5b81d4b6	jetty-server@9.4.12.v20180830	9.4.16.v20190411

Open the chart page →

4,649

is-pattern-1wso2is-pattern1

1 of 2 See more

is-pattern-1 wso2is-pattern1 5.11.0

1 of the 2 container images this version deploys carry CVE-2019-10241.

Container image	Digest	Package	Fixed in
massimolauri/wso2is :5.11.0-centos	e08abf0ce767	jetty-server@8.1.15.v20140411	9.2.27.v20190403

Open the chart page →

6,213

Container images carrying it

58 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
slamdev/apache-hive :2.3.9-2.10.1	b4b029c9b15f	jetty-server@9.2.5.v20141112	9.2.27.v20190403	1
snappydatainc/spark-shuffle :v2.2.0-kubernetes-0.5.1	fd4b2070466f	jetty-server@9.3.11.v20160721	9.3.26.v20190403	1
sslhep/hive-metastore :3.1.3	9e80af083079	jetty-server@9.3.20.v20170531	9.3.26.v20190403	1
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	jetty-server@9.4.6.v20170531	9.4.16.v20190411	1
trinodb/trino :405	ee80ab5eeab2	jetty-server@9.3.24.v20180605	9.3.26.v20190403	1
xetusoss/archiva :v2.2.5	88f25242b9ee	jetty-server@8.1.7.v20120910	9.2.27.v20190403	1
ghcr.io/wbstack/queryservice :0.3.6_0.6	b83b5b81d4b6	jetty-server@9.4.12.v20180830	9.4.16.v20190411	1
quay.io/newrelic/synthetics-minion :2.2.21	98c26e1b8f70	jetty-server@9.4.11.v20180605	9.4.16.v20190411	1