StackRadarChart IndexLive demo

CVE-2023-34981

High

Advisory

Published 21 Jun 2023In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 64th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 8; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 1 of 1; affected package

Apache Tomcat vulnerable to information leak

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
tomcat-embed-coremaven	9.0.74, 10.1.8	9.0.75, 10.1.9	8

OSV records: GHSA-mppv-79ch-vw6q
Also known as: BIT-tomcat-2023-34981

Charts affected

8 by stars

Chart

Latest

Affected images

Radar Score

vrijbrpvrijbrp

1 of 5 See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2023-34981.

Container image	Digest	Package	Fixed in
vrijbrp/haal-centraal-brp-bevragen :develop	5c770c2ae48c	tomcat-embed-core@9.0.74	9.0.75

Open the chart page →

8,811

accountaccount-service

1 of 1 See more

account account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-34981.

Container image	Digest	Package	Fixed in
vitalii1992/account-service :latest	0e694d94551d	tomcat-embed-core@10.1.8	10.1.9

Open the chart page →

2,168

analyticsaccount-service

1 of 1 See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-34981.

Container image	Digest	Package	Fixed in
vitalii1992/analytics-service :latest	8e798836ecea	tomcat-embed-core@10.1.8	10.1.9

Open the chart page →

2,326

gatewayaccount-service

1 of 1 See more

gateway account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-34981.

Container image	Digest	Package	Fixed in
vitalii1992/api-gateway-service :latest	aabe6ac39356	tomcat-embed-core@10.1.8	10.1.9

Open the chart page →

2,853

orderaccount-service

1 of 1 See more

order account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-34981.

Container image	Digest	Package	Fixed in
vitalii1992/order-service :latest	07c4a8833ce4	tomcat-embed-core@10.1.8	10.1.9

Open the chart page →

2,221

quotes-provideraccount-service

1 of 1 See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-34981.

Container image	Digest	Package	Fixed in
vitalii1992/quotes-provider-service :latest	44d2d6e00ab3	tomcat-embed-core@10.1.8	10.1.9

Open the chart page →

2,205

rocketmq-exporterlogic3579

1 of 1 See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-34981.

Container image	Digest	Package	Fixed in
apache/rocketmq-exporter :0.0.2	c8fb51195444	tomcat-embed-core@9.0.74	9.0.75

Open the chart page →

6,634

mitre-siphonmitre-siphon

1 of 4 See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2023-34981.

Container image	Digest	Package	Fixed in
ghcr.io/curium-rocks/mitre-siphon :main	503c00321502	tomcat-embed-core@10.1.8	10.1.9

Open the chart page →

3,083

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/rocketmq-exporter :0.0.2	c8fb51195444	tomcat-embed-core@9.0.74	9.0.75	1
vitalii1992/account-service :latest	0e694d94551d	tomcat-embed-core@10.1.8	10.1.9	1
vitalii1992/analytics-service :latest	8e798836ecea	tomcat-embed-core@10.1.8	10.1.9	1
vitalii1992/api-gateway-service :latest	aabe6ac39356	tomcat-embed-core@10.1.8	10.1.9	1
vitalii1992/order-service :latest	07c4a8833ce4	tomcat-embed-core@10.1.8	10.1.9	1
vitalii1992/quotes-provider-service :latest	44d2d6e00ab3	tomcat-embed-core@10.1.8	10.1.9	1
vrijbrp/haal-centraal-brp-bevragen :develop	5c770c2ae48c	tomcat-embed-core@9.0.74	9.0.75	1
ghcr.io/curium-rocks/mitre-siphon :main	503c00321502	tomcat-embed-core@10.1.8	10.1.9	1