CVE-2023-24936

High

Advisory

Published 14 Jun 2023In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 6; of 17,781 indexed, latest versions
Container images: 19; deployed by those charts
Fix available: 2 of 2; affected packages

.NET Elevation of Privilege Vulnerability

Carried by container images the latest versions of 6 of 17,781 indexed charts deploy, on 19 images.

Affected package	Affected versions	Fixed in	Images
Microsoft.NETCore.App.Runtime.linux-x64nuget	6.0.4, 6.0.7, 6.0.8, 6.0.11	6.0.18	17
Microsoft.NETCore.App.Runtime.linux-musl-x64nuget	7.0.5	7.0.7	2

OSV records: GHSA-jx7q-xxmw-44vf
Also known as: BIT-dotnet-2023-24936, BIT-dotnet-sdk-2023-24936

Charts affected

6 by stars

Chart

Latest

Affected images

Radar Score

eshoponabpabp-charts

1.0.0

10 of 15 See more

eshoponabp abp-charts 1.0.0

10 of the 15 container images this version deploys carry CVE-2023-24936.

Container image	Digest	Package	Fixed in
ghcr.io/volosoft/eshoponabp/app-authserver :1.0.0	22ce496c67d7	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/app-publicweb :1.0.0	7e53010dda55	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/gateway-web :1.0.0	26465a2bf671	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/gateway-web-public :1.0.0	50cab15c80d9	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/service-administration :1.0.0	206a9bee17a8	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/service-basket :1.0.0	dd5ce454072e	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/service-catalog :1.0.0	7ecb00f53d99	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/service-identity :1.0.0	e53bf47b62d0	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/service-ordering :1.0.1	5e836b17337f	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18
ghcr.io/volosoft/eshoponabp/service-payment :1.0.0	2ca91145099c	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18

Open the chart page →

19,799

fedodo.chartfedodo

0.5.11

2 of 4 See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2023-24936.

Container image	Digest	Package	Fixed in
fedodo/fedodo.be.activitypub :147	28dada8e3216	Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5	7.0.7
fedodo/fedodo.be.auth :20	8f8eb7a1207e	Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5	7.0.7

Open the chart page →

4,399

ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build

0.1.1

4 of 7 See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

4 of the 7 container images this version deploys carry CVE-2023-24936.

Container image	Digest	Package	Fixed in
aidasi/swpapi :v1-1-net6-k8s-test-beta	838b5e2080bc	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.18
aidasi/swpbom :v1-1-net6-k8s-test-beta	fee6857b9bc9	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.18
aidasi/swpgateway :v1-1-net6-k8s-test-beta	5ce8dbff7fdc	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.18
aidasi/swpidentity :v1-1-net6-k8s-test-beta	d433285c7d5a	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.18

Open the chart page →

10,091

nethermindethersphere

0.2.1

1 of 1 See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-24936.

Container image	Digest	Package	Fixed in
nethermind/nethermind :1.14.6	15517708c3b6	Microsoft.NETCore.App.Runtime.linux-x64@6.0.11	6.0.18

Open the chart page →

4,920

archisteamfarmg0dscookie

0.3.0

1 of 2 See more

archisteamfarm g0dscookie 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-24936.

Container image	Digest	Package	Fixed in
ghcr.io/justarchinet/archisteamfarm :5.2.5.4	c7c0a52303cb	Microsoft.NETCore.App.Runtime.linux-x64@6.0.4	6.0.18

Open the chart page →

966

cyclonedxopenshift-bootstraps

1.0.12

1 of 1 See more

cyclonedx openshift-bootstraps 1.0.12

1 of the 1 container images this version deploys carry CVE-2023-24936.

Container image	Digest	Package	Fixed in
cyclonedx/cyclonedx-bom-repo-server :latest	9e0c4db6e688	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18

Open the chart page →

726

Container images carrying it

19 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
aidasi/swpapi :v1-1-net6-k8s-test-beta	838b5e2080bc	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.18	1
aidasi/swpbom :v1-1-net6-k8s-test-beta	fee6857b9bc9	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.18	1
aidasi/swpgateway :v1-1-net6-k8s-test-beta	5ce8dbff7fdc	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.18	1
aidasi/swpidentity :v1-1-net6-k8s-test-beta	d433285c7d5a	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.18	1
cyclonedx/cyclonedx-bom-repo-server :latest	9e0c4db6e688	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
fedodo/fedodo.be.activitypub :147	28dada8e3216	Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5	7.0.7	1
fedodo/fedodo.be.auth :20	8f8eb7a1207e	Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5	7.0.7	1
nethermind/nethermind :1.14.6	15517708c3b6	Microsoft.NETCore.App.Runtime.linux-x64@6.0.11	6.0.18	1
ghcr.io/justarchinet/archisteamfarm :5.2.5.4	c7c0a52303cb	Microsoft.NETCore.App.Runtime.linux-x64@6.0.4	6.0.18	1
ghcr.io/volosoft/eshoponabp/app-authserver :1.0.0	22ce496c67d7	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/app-publicweb :1.0.0	7e53010dda55	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/gateway-web :1.0.0	26465a2bf671	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/gateway-web-public :1.0.0	50cab15c80d9	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/service-administration :1.0.0	206a9bee17a8	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/service-basket :1.0.0	dd5ce454072e	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/service-catalog :1.0.0	7ecb00f53d99	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/service-identity :1.0.0	e53bf47b62d0	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/service-ordering :1.0.1	5e836b17337f	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1
ghcr.io/volosoft/eshoponabp/service-payment :1.0.0	2ca91145099c	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.18	1