StackRadar

CVE-2024-11235

High

Advisory

Published 14 Mar 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.015
72nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
8
of 17,781 indexed, latest versions
Container images
8
deployed by those charts
Fix available
3 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 8 images.

Affected packageAffected versionsFixed inImages
php7.4deb7.4.3-4ubuntu2.6, 7.4.3-4ubuntu2.12, 7.4.3-4ubuntu2.13, 7.4.3-4ubuntu2.15+1 more7.4.3-4ubuntu2.295
php8.1deb8.1.2-1ubuntu2.3, 8.1.2-1ubuntu2.148.1.2-1ubuntu2.212
php8.3deb8.3.6-0ubuntu0.24.04.38.3.6-0ubuntu0.24.04.41
OSV records
UBUNTU-CVE-2024-11235
Also known as
USN-7400-1

Charts affected

8 by stars
ChartLatestAffected imagesRadar Score
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2024-11235.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
php8.1@8.1.2-1ubuntu2.3
8.1.2-1ubuntu2.21

Open the chart page →

33,725
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2024-11235.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
php7.4@7.4.3-4ubuntu2.13
7.4.3-4ubuntu2.29

Open the chart page →

18,509
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2024-11235.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
php7.4@7.4.3-4ubuntu2.6
7.4.3-4ubuntu2.29

Open the chart page →

30,668
zabbix-server-mysqlfermosit3.0.21 of 4See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2024-11235.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
php8.3@8.3.6-0ubuntu0.24.04.3
8.3.6-0ubuntu0.24.04.4

Open the chart page →

12,840
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2024-11235.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
php8.1@8.1.2-1ubuntu2.14
8.1.2-1ubuntu2.21

Open the chart page →

14,290
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2024-11235.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
php7.4@7.4.3-4ubuntu2.15
7.4.3-4ubuntu2.29

Open the chart page →

10,248
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2024-11235.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
php7.4@7.4.3-4ubuntu2.12
7.4.3-4ubuntu2.29

Open the chart page →

22,658
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-11235.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
php7.4@7.4.3-4ubuntu2.23
7.4.3-4ubuntu2.29

Open the chart page →

10,006

Container images carrying it

8 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
php7.4@7.4.3-4ubuntu2.15
7.4.3-4ubuntu2.29
1
mediagis/nominatim:3.7c15e941485ef
php7.4@7.4.3-4ubuntu2.12
7.4.3-4ubuntu2.29
1
mediagis/nominatim:4.2d0eae7b51374
php8.1@8.1.2-1ubuntu2.14
8.1.2-1ubuntu2.21
1
owncloud/server:10.15.051d9b74fc2a8
php7.4@7.4.3-4ubuntu2.23
7.4.3-4ubuntu2.29
1
snipe/snipe-it:v6.0.1455fb7636a98c
php7.4@7.4.3-4ubuntu2.13
7.4.3-4ubuntu2.29
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
php8.3@8.3.6-0ubuntu0.24.04.3
8.3.6-0ubuntu0.24.04.4
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
php7.4@7.4.3-4ubuntu2.6
7.4.3-4ubuntu2.29
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
php8.1@8.1.2-1ubuntu2.3
8.1.2-1ubuntu2.21
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.