StackRadar

CVE-2024-12801

Low

Advisory

Published 19 Dec 2024In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.4
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
409
of 17,787 indexed, latest versions
Container images
383
deployed by those charts
Fix available
1 of 1
affected package

QOS.CH logback-core Server-Side Request Forgery vulnerability

Carried by container images the latest versions of 409 of 17,787 indexed charts deploy, on 383 images.

Affected packageAffected versionsFixed inImages
logback-coremaven1.0.11, 1.0.13, 1.1.2, 1.1.3+30 more1.3.15, 1.5.13383
OSV records
GHSA-6v67-2wr5-gvf4

Charts affected

409 by stars
ChartLatestAffected imagesRadar Score
drillwearefrank1.3.62 of 3See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
logback-core@1.3.5
1.3.15
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
logback-core@1.2.10
1.3.15

Open the chart page →

9,397
webapp-db-javawebapp-db-java-repo0.1.01 of 2See more

webapp-db-java webapp-db-java-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
arturisimo/webapp-db-java:v2c95524e90b57
logback-core@1.2.10
1.3.15

Open the chart page →

2,566
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
logback-core@1.2.3
1.3.15

Open the chart page →

5,460
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
logback-core@1.2.10
1.3.15

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
logback-core@1.2.10
1.3.15

Open the chart page →

28,605
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-core@1.1.3
1.3.15

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-core@1.1.3
1.3.15

Open the chart page →

22,665
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
logback-core@1.2.9
1.3.15

Open the chart page →

9,248
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
logback-core@1.4.11
1.5.13

Open the chart page →

11,577

Container images carrying it

383 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
treskon/portrait:DEV-latest88e813f22347
logback-core@1.5.12
1.5.13
1
trinodb/trino:45038c6f24ab1a4
logback-core@1.5.6
1.5.13
1
trinodb/trino:405ee80ab5eeab2
logback-core@1.2.11
1.3.15
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
logback-core@1.2.4
1.3.15
1
vincentgwzhang/k8sforjava:latesta9139f2cd98f
logback-core@1.5.12
1.5.13
1
vitalii1992/account-service:latest0e694d94551d
logback-core@1.4.7
1.5.13
1
vitalii1992/analytics-service:latest8e798836ecea
logback-core@1.4.7
1.5.13
1
vitalii1992/api-gateway-service:latestaabe6ac39356
logback-core@1.4.7
1.5.13
1
vitalii1992/order-service:latest07c4a8833ce4
logback-core@1.4.7
1.5.13
1
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
logback-core@1.4.7
1.5.13
1
vlebediantsev/config-server-another:lateste7f20450d2ae
logback-core@1.2.11
1.3.15
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
logback-core@1.2.11
1.3.15
1
vlebediantsev/logic-ms:latestdf8bf38c535b
logback-core@1.2.11
1.3.15
1
vlebediantsev/registration-ms-final:latest427af418b75e
logback-core@1.2.11
1.3.15
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
logback-core@1.2.11
1.3.15
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
logback-core@1.2.12
1.3.15
1
xuxueli/xxl-job-admin:2.4.0640093c35fd6
logback-core@1.2.11
1.3.15
1
yuzutech/kroki:0.17.0192b7b27c857
logback-core@1.2.11
1.3.15
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
logback-core@1.2.11
1.3.15
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
logback-core@1.2.3
1.3.15
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
logback-core@1.4.8
1.5.13
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
logback-core@1.4.14
1.5.13
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
logback-core@1.4.7
1.5.13
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
logback-core@1.2.3
1.3.15
1
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
logback-core@1.5.12
1.5.13
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
logback-core@1.2.11
1.3.15
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
logback-core@1.5.12
1.5.13
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
logback-core@1.5.12
1.5.13
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
logback-core@1.2.3
1.3.15
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
logback-core@1.2.10
1.3.15
1
ghcr.io/kubelauncher/zookeeper7826e9caa461
logback-core@1.2.13
1.3.15
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
logback-core@1.2.3
1.3.15
1
ghcr.io/kvaps/linstor-satellite:v1.14.0a573fb9bc809
logback-core@1.2.3
1.3.15
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
logback-core@1.2.3
1.3.15
1
ghcr.io/navikt/mock-oauth2-server:2.1.1065d4ed47ce09
logback-core@1.5.7
1.5.13
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
logback-core@1.2.11
1.3.15
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
logback-core@1.4.11
1.5.13
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
logback-core@1.2.13
1.3.15
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
logback-core@1.1.5
1.3.15
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
logback-core@1.2.3
1.3.15
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
logback-core@1.2.11
1.3.15
1
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
logback-core@1.3.14
1.3.15
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
logback-core@1.3.14
1.3.15
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
logback-core@1.3.14
1.3.15
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
logback-core@1.3.14
1.3.15
1
ghcr.io/wbstack/queryservice:0.3.6_0.6b83b5b81d4b6
logback-core@1.2.3
1.3.15
1
ghcr.io/wbstack/queryservice-updater:0.3.84_3.97525a57ac3f1
logback-core@1.2.3
1.3.15
1
quay.io/deployhub/ms-ui:svccat-v11.0.815-g717581f5dedbc31e6f
logback-core@1.5.6
1.5.13
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
logback-core@1.2.11
1.3.15
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
logback-core@1.2.11
1.3.15
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.