StackRadar

CVE-2023-24998

High

Advisory

Published 20 Feb 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.488
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
206
of 17,781 indexed, latest versions
Container images
168
deployed by those charts
Fix available
3 of 3
affected packages

Apache Commons FileUpload denial of service vulnerability

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 168 images.

Affected packageAffected versionsFixed inImages
tomcat-embed-coremaven9.0.13, 9.0.16, 9.0.21, 9.0.26+25 more9.0.71113
commons-fileuploadmaven1.2.1, 1.3, 1.3.1, 1.3.1-jenkins-1+3 more1.574
tomcat-coyotemaven9.0.40, 9.0.659.0.712
OSV records
GHSA-hfrx-6qgj-fp6c

Charts affected

206 by stars
ChartLatestAffected imagesRadar Score
wiremocklebenitzaVerified publisher0.3.11 of 1See more

wiremock lebenitza 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.27.22328a9fce2bf
commons-fileupload@1.4
1.5

Open the chart page →

2,427
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
tomcat-embed-core@9.0.46
9.0.71
elastictranscoder/media-storage:f6d861a026208b8c2359
commons-fileupload@1.4
tomcat-embed-core@9.0.46
1.5
9.0.71
elastictranscoder/transcoder:627e21dcb4a0327029e6
tomcat-embed-core@9.0.46
9.0.71
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
tomcat-embed-core@9.0.46
9.0.71

Open the chart page →

58,160
filebot-botluiscajl0.0.111 of 1See more

filebot-bot luiscajl 0.0.11

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
tomcat-embed-core@9.0.56
9.0.71

Open the chart page →

3,679
lavandaluiscajl0.0.1344 of 5See more

lavanda luiscajl 0.0.134

4 of the 5 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
tomcat-embed-core@9.0.38
9.0.71
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
tomcat-embed-core@9.0.38
9.0.71
lavandadelpatio/filebot:0.0.671f2ccec8c0d
tomcat-embed-core@9.0.44
9.0.71
lavandadelpatio/tmdb:0.0.2f36af885e915
commons-fileupload@1.4
tomcat-embed-core@9.0.44
1.5
9.0.71

Open the chart page →

18,248
tmdbluiscajl0.2.41 of 1See more

tmdb luiscajl 0.2.4

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
lavandadelpatio/tmdb:latestded9377636e9
commons-fileupload@1.4
1.5

Open the chart page →

2,234
torznab-atomohdluiscajl0.0.31 of 1See more

torznab-atomohd luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
lavandadelpatio/torznab-atomohd:latest214eaef5444c
commons-fileupload@1.4
1.5

Open the chart page →

3,290
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
tomcat-embed-core@9.0.59
9.0.71

Open the chart page →

11,188
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
mintproject/model-catalog-endpoint:29256555a6fbaefae4729d5cd259564708a4ab04ffbb13f20465
commons-fileupload@1.3.3
1.5

Open the chart page →

43,341
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
commons-fileupload@1.4
tomcat-embed-core@9.0.65
1.5
9.0.71

Open the chart page →

8,928
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
polyglotncsaVerified publisher0.1.114 of 18See more

polyglot ncsa 0.1.1

14 of the 18 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
commons-fileupload@1.3.1
1.5
ncsapolyglot/converters-avconv:latestc44b22eb58bb
commons-fileupload@1.3
1.5
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
commons-fileupload@1.3
1.5
ncsapolyglot/converters-ffmpeg:latest48c852c1204b
commons-fileupload@1.3
1.5
ncsapolyglot/converters-flac:latest072cf5bc6f99
commons-fileupload@1.3
1.5
ncsapolyglot/converters-gdal:latestf746049515c1
commons-fileupload@1.3
1.5
ncsapolyglot/converters-ghostscript:latestf350da56dd55
commons-fileupload@1.3
1.5
ncsapolyglot/converters-htmldoc:latest317dd9e56922
commons-fileupload@1.3
1.5
ncsapolyglot/converters-imagemagick:latestd244ea8c32ac
commons-fileupload@1.3
1.5
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
commons-fileupload@1.3
1.5
ncsapolyglot/converters-txt2html:latest30ee96508c0b
commons-fileupload@1.3
1.5
ncsapolyglot/converters-unoconv:latest1d9cebe3022b
commons-fileupload@1.3
1.5
ncsapolyglot/converters-zip:latestf889fe30e2c7
commons-fileupload@1.3
1.5
ncsapolyglot/polyglot:2.4.097a8c01c076e
commons-fileupload@1.3
1.5

Open the chart page →

55,726
config-server-helm-chartnotesprojectchart0.1.01 of 1See more

config-server-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vlebediantsev/config-server-another:lateste7f20450d2ae
tomcat-embed-core@9.0.65
9.0.71

Open the chart page →

3,422
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
tomcat-embed-core@9.0.64
9.0.71

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
commons-fileupload@1.4
tomcat-embed-core@9.0.64
1.5
9.0.71

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
tomcat-embed-core@9.0.64
9.0.71

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
tomcat-embed-core@9.0.64
9.0.71

Open the chart page →

5,873
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
commons-fileupload@1.4
1.5

Open the chart page →

12,927
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
voltha/voltha-onos:5.1.8e038acb950d3
commons-fileupload@1.4
1.5

Open the chart page →

41,044
bpjstk-serviceopenshift1.0.04 of 6See more

bpjstk-service openshift 1.0.0

4 of the 6 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
andrianrf/bpjstk-service:latest46abe878d9d8
tomcat-embed-core@9.0.38
9.0.71
andrianrf/bpjstk-simulator:latestb63fdb51d39d
tomcat-embed-core@9.0.38
9.0.71
andrianrf/iso-client:latestba560086ce15
tomcat-embed-core@9.0.38
9.0.71
andrianrf/iso-server:latest7da47f525c7d
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

34,671
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
tomcat-embed-core@9.0.60
9.0.71

Open the chart page →

13,607
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
tomcat-embed-core@9.0.60
9.0.71

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
tomcat-embed-core@9.0.60
9.0.71

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
tomcat-embed-core@9.0.60
9.0.71

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
tomcat-embed-core@9.0.60
9.0.71

Open the chart page →

13,100
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
tomcat-embed-core@9.0.26
9.0.71

Open the chart page →

26,339
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-10.1.01 of 1See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:1.04d2eb25b9225
tomcat-embed-core@9.0.43
9.0.71

Open the chart page →

10,392
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-24998.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.71

Open the chart page →

20,190

Container images carrying it

168 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
vlebediantsev/registration-ms-final:latest427af418b75e
tomcat-embed-core@9.0.64
9.0.71
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
tomcat-embed-core@9.0.64
9.0.71
1
voltha/voltha-onos:5.1.8e038acb950d3
commons-fileupload@1.4
1.5
1
vrijbrp/balie-ws:developc6603cb829ea
commons-fileupload@1.4
1.5
1
zenko/zenko-cosbench:0.0.6386a1f48ec0e
commons-fileupload@1.2.1
1.5
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
commons-fileupload@1.4
tomcat-embed-core@9.0.30
1.5
9.0.71
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
commons-fileupload@1.4
1.5
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
tomcat-embed-core@9.0.36
9.0.71
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
commons-fileupload@1.4
tomcat-embed-core@9.0.37
1.5
9.0.71
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
commons-fileupload@1.4
tomcat-embed-core@9.0.65
1.5
9.0.71
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
tomcat-embed-core@9.0.21
9.0.71
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
tomcat-embed-core@9.0.70
9.0.71
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
commons-fileupload@1.4
1.5
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
commons-fileupload@1.4
1.5
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
commons-fileupload@1.4
1.5
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
commons-fileupload@1.3.3
1.5
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
commons-fileupload@1.4
1.5
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
tomcat-embed-core@9.0.46
9.0.71
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.