StackRadar

CVE-2024-43394

High

Advisory

Published 10 Jul 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 17,781 indexed, latest versions
Container images
35
deployed by those charts
Fix available
3 of 3
affected packages

Apache HTTP Server: SSRF on Windows due to UNC paths

Carried by container images the latest versions of 39 of 17,781 indexed charts deploy, on 35 images.

Affected packageAffected versionsFixed inImages
apache2deb2.4.48-3.1+deb11u1, 2.4.51-1~deb11u1, 2.4.52-1~deb11u2, 2.4.53-1~deb11u1+3 more2.4.65-1~deb11u125
apache2apk2.4.59-r0, 2.4.62-r0, 2.4.63-r42.4.64-r09
apachebitnami2.4.54-1572.4.641
OSV records
ALPINE-CVE-2024-43394BIT-apache-2024-43394DEBIAN-CVE-2024-43394

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
mauticone-acre-fundVerified publisher0.1.71 of 3See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
mautic/mautic:v4-apache94ea4acf4049
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

2,667
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
apache2@2.4.62-r0
2.4.64-r0

Open the chart page →

2,811
roundcubevolker-raschekVerified publisher0.3.11 of 1See more

roundcube volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

1,797
block-buster-helm-appblock-buster-app7.6.01 of 1See more

block-buster-helm-app block-buster-app 7.6.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

977
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

2,096
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
apache2@2.4.51-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

3,646
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
apache2@2.4.62-r0
2.4.64-r0

Open the chart page →

6,416
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
filegator/filegator:latestce163db220d4
apache2@2.4.62-1~deb11u2
2.4.65-1~deb11u1

Open the chart page →

5,508
phpipamphpipam-helmVerified publisher1.0.122 of 3See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.7.354468713454e
apache2@2.4.62-r0
2.4.64-r0
phpipam/phpipam-www:v1.7.3ace0efd24830
apache2@2.4.62-r0
2.4.64-r0

Open the chart page →

3,778
postfixadminvolker-raschekVerified publisher0.3.11 of 1See more

postfixadmin volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
volkerraschek/postfixadmin:3.3.13c4f10aebf87b
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

1,083
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
adolfintel/speedtest:latest1f828fe83374
apache2@2.4.52-1~deb11u2
2.4.65-1~deb11u1

Open the chart page →

7,152
block-buster-helm-appbb-app-helm-chartsVerified publisher7.6.21 of 1See more

block-buster-helm-app bb-app-helm-charts 7.6.2

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

977
block-buster-helm-appblockbaster-helmapp7.6.01 of 1See more

block-buster-helm-app blockbaster-helmapp 7.6.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

977
phpcamptocamp31.0.01 of 1See more

php camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
library/php:7.3-apacheb9872cd287ef
apache2@2.4.52-1~deb11u2
2.4.65-1~deb11u1

Open the chart page →

1,309
chart-appchart-app0.3.01 of 2See more

chart-app chart-app 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
n22107670/sample-app:0.4.08f3072db7aeb
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

1,775
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
robotshop/rs-ratings:latest4899c686c249
apache2@2.4.48-3.1+deb11u1
2.4.65-1~deb11u1

Open the chart page →

29,555
openldapcsic-charts0.1.11 of 2See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

5,293
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

29,033
wordpressdevops0.12.02 of 4See more

wordpress devops 0.12.0

2 of the 4 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

12,992
smokepingdjjudas21Verified publisher0.1.31 of 1See more

smokeping djjudas21 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
linuxserver/smokeping:2.8.2b7f906899cd3
apache2@2.4.62-r0
2.4.64-r0

Open the chart page →

2,053
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
apache2@2.4.62-r0
2.4.64-r0

Open the chart page →

1,664
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
apache@2.4.54-157
2.4.64

Open the chart page →

7,541
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
apache@2.4.54-157
2.4.64

Open the chart page →

7,541
cryptofoliogeek-cookbookVerified publisher1.4.21 of 1See more

cryptofolio geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
xtrendence/cryptofolio:V.2.2.0e6e6612bb94c
apache2@2.4.48-3.1+deb11u1
2.4.65-1~deb11u1

Open the chart page →

1,493
sample-appkubeuest0.1.31 of 1See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
michaelepitech/sample-app:latestaf51d61c19f5
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

1,427
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
apache2@2.4.59-r0
2.4.64-r0

Open the chart page →

5,332
webdavlinuxoid690.1.01 of 1See more

webdav linuxoid69 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
apache2@2.4.62-r0
2.4.64-r0

Open the chart page →

1,081
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
pecan/web:1.7.2814d678c5550
apache2@2.4.51-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

14,154
openldapopenldap0.1.11 of 2See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
ldapaccountmanager/lam:8.0.1d46cf25d1dda
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

5,293
binaryvision-tlophntom0.0.41 of 1See more

binaryvision-tlo phntom 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
phntom/binaryvision-tlo-static:0.0.4e8b9ac93a3dd
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

1,277
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
apache2@2.4.63-r4
2.4.64-r0

Open the chart page →

2,257
phpmyadminsitepilot1.0.11 of 1See more

phpmyadmin sitepilot 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.138437e021deb
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

1,724
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
helga09/php_shoes_ukr:v1.1.1e283539bcb8c
apache2@2.4.56-1~deb11u2
2.4.65-1~deb11u1

Open the chart page →

7,574
daloradiussvtech-public-helm-charts1.0.01 of 1See more

daloradius svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
ptthanh1511/daloradius:1.2-devafecc5143fcb
apache2@2.4.56-1~deb11u2
2.4.65-1~deb11u1

Open the chart page →

718
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
apache2@2.4.56-1~deb11u2
2.4.65-1~deb11u1

Open the chart page →

2,038
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

2,132
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-43394.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1

Open the chart page →

2,021

Container images carrying it

35 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
phpmyadmin/phpmyadmin:5.2.0ae6dadd9cf3c
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1
3
siddharth67/block-buster-dev:7.6.04e1151ea5774
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
3
ldapaccountmanager/lam:8.0.1d46cf25d1dda
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
2
yzhou442/equiz:latesta3f7ca69e28d
apache@2.4.54-157
2.4.64
2
adolfintel/speedtest:latest1f828fe83374
apache2@2.4.52-1~deb11u2
2.4.65-1~deb11u1
1
filegator/filegator:latestce163db220d4
apache2@2.4.62-1~deb11u2
2.4.65-1~deb11u1
1
helga09/php_shoes_ukr:v1.1.1e283539bcb8c
apache2@2.4.56-1~deb11u2
2.4.65-1~deb11u1
1
leantime/leantime:3.3.3ad4bfb0699d3
apache2@2.4.62-r0
2.4.64-r0
1
library/monica:3.7.0-apacheceb1ba4196ab
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
1
library/php:7.3-apacheb9872cd287ef
apache2@2.4.52-1~deb11u2
2.4.65-1~deb11u1
1
library/wordpress:6.0.0-php8.0-apache277c6c25980f
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1
1
linuxserver/heimdall:2.6.371597f4461e4
apache2@2.4.62-r0
2.4.64-r0
1
linuxserver/smokeping:2.8.2b7f906899cd3
apache2@2.4.62-r0
2.4.64-r0
1
mautic/mautic:v4-apache94ea4acf4049
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
1
michaelepitech/sample-app:latestaf51d61c19f5
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
1
n22107670/sample-app:0.4.08f3072db7aeb
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
1
pecan/web:1.7.2814d678c5550
apache2@2.4.51-1~deb11u1
2.4.65-1~deb11u1
1
phntom/binaryvision-tlo-static:0.0.4e8b9ac93a3dd
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1
1
phpipam/phpipam-cron:v1.7.354468713454e
apache2@2.4.62-r0
2.4.64-r0
1
phpipam/phpipam-www:v1.7.3ace0efd24830
apache2@2.4.62-r0
2.4.64-r0
1
phpmyadmin/phpmyadmin:5.138437e021deb
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1
1
ptthanh1511/daloradius:1.2-devafecc5143fcb
apache2@2.4.56-1~deb11u2
2.4.65-1~deb11u1
1
restic/rest-server:0.14.0d2aff06f47eb
apache2@2.4.63-r4
2.4.64-r0
1
robotshop/rs-ratings:latest4899c686c249
apache2@2.4.48-3.1+deb11u1
2.4.65-1~deb11u1
1
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1
1
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
apache2@2.4.56-1~deb11u2
2.4.65-1~deb11u1
1
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
apache2@2.4.59-r0
2.4.64-r0
1
volkerraschek/postfixadmin:3.3.13c4f10aebf87b
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
1
xtrendence/cryptofolio:V.2.2.0e6e6612bb94c
apache2@2.4.48-3.1+deb11u1
2.4.65-1~deb11u1
1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
apache2@2.4.62-r0
2.4.64-r0
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
apache2@2.4.62-r0
2.4.64-r0
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
apache2@2.4.51-1~deb11u1
2.4.65-1~deb11u1
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
apache2@2.4.54-1~deb11u1
2.4.65-1~deb11u1
1
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
apache2@2.4.53-1~deb11u1
2.4.65-1~deb11u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.