StackRadar

CVE-2021-33813

High

Advisory

Published 27 Jul 2021In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.194
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
17
of 17,781 indexed, latest versions
Container images
21
deployed by those charts
Fix available
None
affected package

XML External Entity (XXE) Injection in JDOM

Carried by container images the latest versions of 17 of 17,781 indexed charts deploy, on 21 images.

Affected packageAffected versionsFixed inImages
jdommaven1.0, 1.1, 1.1.2, 1.1.3no fix listed21
OSV records
GHSA-2363-cqg2-863c
Also known as
BIT-solr-2021-33813

Charts affected

17 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
jdom@1.1
no fix listed
dbanda/spark:2.4.6d0e6367876ae
jdom@1.1
no fix listed

Open the chart page →

13,738
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
jdom@1.0
no fix listed

Open the chart page →

8,636
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
jdom@1.1
no fix listed

Open the chart page →

7,948
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
jdom@1.1
no fix listed

Open the chart page →

7,335
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jdom@1.1
no fix listed

Open the chart page →

8,198
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
jdom@1.0
no fix listed

Open the chart page →

7,936
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
jdom@1.1
no fix listed

Open the chart page →

9,722
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
jdom@1.0
no fix listed

Open the chart page →

27,949
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.82 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
jdom@1.1.3
no fix listed
jingking/geonetwork-hnap:4.2.843e74ab234e1
jdom@1.1.2
no fix listed

Open the chart page →

34,754
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
jdom@1.0
no fix listed
ibmcom/microclimate-theia:lateste17bdccc5030
jdom@1.0
no fix listed

Open the chart page →

57,669
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
jdom@1.0
no fix listed

Open the chart page →

12,927
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
jdom@1.0
no fix listed

Open the chart page →

41,044
bpjstk-serviceopenshift1.0.02 of 6See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
andrianrf/iso-client:latestba560086ce15
jdom@1.1.3
no fix listed
andrianrf/iso-server:latest7da47f525c7d
jdom@1.1.3
no fix listed

Open the chart page →

34,671
hive-metastorepresto-loadbalancer0.2.31 of 1See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
datappeal/hive-metastore:lateste38c085a3567
jdom@1.1
no fix listed

Open the chart page →

9,606
archivaslamdev0.0.71 of 2See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
xetusoss/archiva:v2.2.588f25242b9ee
jdom@1.0
no fix listed

Open the chart page →

6,907
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
jdom@1.1.3
no fix listed

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2021-33813.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
jdom@1.0
no fix listed

Open the chart page →

13,079

Container images carrying it

21 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
andrianrf/iso-client:latestba560086ce15
jdom@1.1.3
no fix listed
1
andrianrf/iso-server:latest7da47f525c7d
jdom@1.1.3
no fix listed
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
jdom@1.0
no fix listed
1
atlassian/confluence-server:7.10.03b9222ab32ef
jdom@1.1.3
no fix listed
1
atlassian/jira-software:8.14.037bc46cbec1a
jdom@1.0
no fix listed
1
atlassian/jira-software:9.7.264a75aa4ec4e
jdom@1.0
no fix listed
1
datappeal/hive-metastore:lateste38c085a3567
jdom@1.1
no fix listed
1
dbanda/livy:0.80ca125e68e53
jdom@1.1
no fix listed
1
dbanda/spark:2.4.6d0e6367876ae
jdom@1.1
no fix listed
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
jdom@1.1.3
no fix listed
1
gradiant/hdfs:3.2.2e3bf364fe713
jdom@1.1
no fix listed
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
jdom@1.0
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
jdom@1.0
no fix listed
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
jdom@1.1.2
no fix listed
1
onosproject/onos:2.2.144914a8d4b3f
jdom@1.0
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
jdom@1.0
no fix listed
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
jdom@1.1
no fix listed
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
jdom@1.1
no fix listed
1
sslhep/hive-metastore:3.1.39e80af083079
jdom@1.1
no fix listed
1
voltha/voltha-onos:5.1.8e038acb950d3
jdom@1.0
no fix listed
1
xetusoss/archiva:v2.2.588f25242b9ee
jdom@1.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.