StackRadar

CVE-2024-38828

Medium

Advisory

Published 18 Nov 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
94
of 17,781 indexed, latest versions
Container images
104
deployed by those charts
Fix available
1 of 1
affected package

Spring MVC controller vulnerable to a DoS attack

Carried by container images the latest versions of 94 of 17,781 indexed charts deploy, on 104 images.

Affected packageAffected versionsFixed inImages
spring-webmvcmaven5.3.1, 5.3.2, 5.3.3, 5.3.4+24 more5.3.42104
OSV records
GHSA-w3c8-7r8f-9jp8

Charts affected

94 by stars
ChartLatestAffected imagesRadar Score
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
spring-webmvc@5.3.39
5.3.42

Open the chart page →

13,953
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
spring-webmvc@5.3.22
5.3.42

Open the chart page →

10,469
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
spring-webmvc@5.3.22
5.3.42

Open the chart page →

11,839
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
spring-webmvc@5.3.18
5.3.42

Open the chart page →

7,901
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
spring-webmvc@5.3.26
5.3.42

Open the chart page →

14,566
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
spring-webmvc@5.3.27
5.3.42

Open the chart page →

28,534
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
spring-webmvc@5.3.27
5.3.42

Open the chart page →

8,811
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
spring-webmvc@5.3.34
5.3.42

Open the chart page →

5,398
gradle-examplegradle-exampleVerified publisher1.1.31 of 1See more

gradle-example gradle-example 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
spring-webmvc@5.3.7
5.3.42

Open the chart page →

3,393
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
spring-webmvc@5.3.13
5.3.42

Open the chart page →

5,624
todo-apipavanelthepu0.1.01 of 2See more

todo-api pavanelthepu 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-webmvc@5.3.8
5.3.42

Open the chart page →

2,544
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
spring-webmvc@5.3.23
5.3.42

Open the chart page →

7,576
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
spring-webmvc@5.3.8
5.3.42

Open the chart page →

4,621
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
spring-webmvc@5.3.18
5.3.42

Open the chart page →

3,958
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
spring-webmvc@5.3.23
5.3.42

Open the chart page →

9,837
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
spring-webmvc@5.3.13
5.3.42

Open the chart page →

10,120
sentinel-dashboardsentinel-dashboardVerified publisher0.1.01 of 1See more

sentinel-dashboard sentinel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
royalwang/sentinel-dashboard:1.8.4df99e2499f91
spring-webmvc@5.3.18
5.3.42

Open the chart page →

4,287
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
spring-webmvc@5.3.24
5.3.42

Open the chart page →

13,486
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
hazelcast/management-center:5.3.2f9d34300d330
spring-webmvc@5.3.29
5.3.42

Open the chart page →

28,131
dashboard-pui9assist-iot-tactile-dashboard0.2.01 of 3See more

dashboard-pui9 assist-iot-tactile-dashboard 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
assistiot/tacticle_dashboard:api-lateste4414cb72dc4
spring-webmvc@5.3.20
5.3.42

Open the chart page →

4,145
url-shortenerbeastob1.0.21 of 3See more

url-shortener beastob 1.0.2

1 of the 3 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
beastob/url-shortener:1.0.299a49885ab33
spring-webmvc@5.3.10
5.3.42

Open the chart page →

3,607
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
spring-webmvc@5.3.18
5.3.42

Open the chart page →

13,459
Chart-Oracle-Host-Appchart-oracle-host-appVerified publisher0.1.21 of 1See more

Chart-Oracle-Host-App chart-oracle-host-app 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
stanislovesid/oracle-host-app:14fe1ed26e194
spring-webmvc@5.3.12
5.3.42

Open the chart page →

2,434
ganttcnieg2.1.01 of 1See more

gantt cnieg 2.1.0

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
cnieg/gantt:1.1.2d4b478d76f2a
spring-webmvc@5.3.23
5.3.42

Open the chart page →

2,390
consumer-helmconsumer-app-helm-chart0.1.01 of 1See more

consumer-helm consumer-app-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
j4ckhunter/consumer:1.00bb7a429e3e75
spring-webmvc@5.3.22
5.3.42

Open the chart page →

2,564
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
spring-webmvc@5.3.34
5.3.42

Open the chart page →

5,398
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
spring-webmvc@5.3.10
5.3.42

Open the chart page →

7,691
scorpio-brokerfiware0.3.39 of 10See more

scorpio-broker fiware 0.3.3

9 of the 10 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-webmvc@5.3.13
5.3.42

Open the chart page →

55,600
scorpiobrokerfiware0.1.29 of 10See more

scorpiobroker fiware 0.1.2

9 of the 10 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
spring-webmvc@5.3.13
5.3.42
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
spring-webmvc@5.3.13
5.3.42

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
spring-webmvc@5.3.13
5.3.42

Open the chart page →

5,286
my-chartfleet-web-app0.1.01 of 6See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-queue:release2f7f8d5951155
spring-webmvc@5.3.23
5.3.42

Open the chart page →

24,296
base-depflofree-chartVerified publisher1.0.11 of 1See more

base-dep flofree-chart 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
flofree/base-project:2.1.16b6486c5f81e
spring-webmvc@5.3.29
5.3.42

Open the chart page →

2,797
mod-agreementsfolio-org0.1.321 of 1See more

mod-agreements folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
folioci/mod-agreements:latest29c3f233a498
spring-webmvc@5.3.39
5.3.42

Open the chart page →

1,874
mod-licensesfolio-org0.1.321 of 1See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
folioci/mod-licenses:latestcfd6109bf477
spring-webmvc@5.3.39
5.3.42

Open the chart page →

1,760
mod-oafolio-org0.1.21 of 1See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
folioci/mod-oa:latestae3b069d4ba5
spring-webmvc@5.3.39
5.3.42

Open the chart page →

1,733
mod-serials-managementfolio-org0.1.11 of 1See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
folioci/mod-serials-management:latest571fa1ffe8c9
spring-webmvc@5.3.39
5.3.42

Open the chart page →

1,733
mod-service-interactionfolio-org0.1.61 of 1See more

mod-service-interaction folio-org 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
folioci/mod-service-interaction:latestf53c327a48e8
spring-webmvc@5.3.39
5.3.42

Open the chart page →

1,733
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
spring-webmvc@5.3.8
5.3.42

Open the chart page →

18,230
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
spring-webmvc@5.3.18
5.3.42

Open the chart page →

8,943
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
spring-webmvc@5.3.7
5.3.42

Open the chart page →

12,581
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
spring-webmvc@5.3.30
5.3.42

Open the chart page →

34,754
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
spring-webmvc@5.3.20
5.3.42

Open the chart page →

15,722
siembolgresearch0.1.62 of 4See more

siembol gresearch 0.1.6

2 of the 4 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
spring-webmvc@5.3.23
5.3.42
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
spring-webmvc@5.3.23
5.3.42

Open the chart page →

14,312
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
dannielkil/book-backend:lateste3b479a55a69
spring-webmvc@5.3.22
5.3.42

Open the chart page →

9,122
todo-apihelm-repo-sharif0.1.01 of 2See more

todo-api helm-repo-sharif 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
spring-webmvc@5.3.8
5.3.42

Open the chart page →

2,544
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
spring-webmvc@5.3.37
5.3.42

Open the chart page →

5,320
fpga-operatorinaccelVerified publisher2.8.21 of 7See more

fpga-operator inaccel 2.8.2

1 of the 7 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
inaccel/coral:2.18c53744ed70b
spring-webmvc@5.3.31
5.3.42

Open the chart page →

5,759
spring-boot-chartjhidalgo3-githubVerified publisher4.0.01 of 1See more

spring-boot-chart jhidalgo3-github 4.0.0

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
jhidalgo3/spring-echo-example:lateste08733191ea0
spring-webmvc@5.3.3
5.3.42

Open the chart page →

1,703
xxl-job-adminjoelee2012Verified publisher1.1.01 of 2See more

xxl-job-admin joelee2012 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
xuxueli/xxl-job-admin:2.4.0640093c35fd6
spring-webmvc@5.3.25
5.3.42

Open the chart page →

3,127
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-38828.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
spring-webmvc@5.3.1
5.3.42

Open the chart page →

8,884

Container images carrying it

104 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
spring-webmvc@5.3.31
5.3.42
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
spring-webmvc@5.3.24
5.3.42
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
spring-webmvc@5.3.31
5.3.42
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
spring-webmvc@5.3.7
5.3.42
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.