StackRadar

CVE-2024-12801

Low

Advisory

Published 19 Dec 2024In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.4
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
409
of 17,787 indexed, latest versions
Container images
383
deployed by those charts
Fix available
1 of 1
affected package

QOS.CH logback-core Server-Side Request Forgery vulnerability

Carried by container images the latest versions of 409 of 17,787 indexed charts deploy, on 383 images.

Affected packageAffected versionsFixed inImages
logback-coremaven1.0.11, 1.0.13, 1.1.2, 1.1.3+30 more1.3.15, 1.5.13383
OSV records
GHSA-6v67-2wr5-gvf4

Charts affected

409 by stars
ChartLatestAffected imagesRadar Score
drillwearefrank1.3.62 of 3See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
logback-core@1.3.5
1.3.15
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
logback-core@1.2.10
1.3.15

Open the chart page →

9,397
webapp-db-javawebapp-db-java-repo0.1.01 of 2See more

webapp-db-java webapp-db-java-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
arturisimo/webapp-db-java:v2c95524e90b57
logback-core@1.2.10
1.3.15

Open the chart page →

2,566
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
logback-core@1.2.3
1.3.15

Open the chart page →

5,460
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
logback-core@1.2.10
1.3.15

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
logback-core@1.2.10
1.3.15

Open the chart page →

28,605
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-core@1.1.3
1.3.15

Open the chart page →

10,127
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
logback-core@1.1.3
1.3.15

Open the chart page →

22,665
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
logback-core@1.2.9
1.3.15

Open the chart page →

9,248
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-12801.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
logback-core@1.4.11
1.5.13

Open the chart page →

11,577

Container images carrying it

383 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
logback-core@1.2.3
1.3.15
1
quay.io/fiware/contract-management:3.3.122bcfcf874451
logback-core@1.5.9
1.5.13
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
logback-core@1.2.3
1.3.15
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-customer-bill-management:1.18.0dee901f1f75d
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-customer-management:1.18.0d3519cebecd0
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-party-catalog:1.18.07d6969a7393a
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-party-role:1.18.052db89f17863
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-product-catalog:1.18.0e409338726da
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-product-inventory:1.18.03a5d6dd30f1d
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-product-ordering-management:1.18.042c81c291f6f
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-quote:1.18.0d9ca3a334352
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-resource-catalog:1.18.0b0d853627c59
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
logback-core@1.2.11
1.3.15
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
logback-core@1.2.11
1.3.15
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
logback-core@1.2.11
1.3.15
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
logback-core@1.4.11
1.5.13
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
logback-core@1.2.3
1.3.15
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
logback-core@1.4.14
1.5.13
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
logback-core@1.4.14
1.5.13
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
logback-core@1.4.14
1.5.13
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
logback-core@1.4.14
1.5.13
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
logback-core@1.5.9
1.5.13
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
logback-core@1.2.12
1.3.15
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
logback-core@1.2.3
1.3.15
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
logback-core@1.5.9
1.5.13
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.