StackRadar

CVE-2025-24813

CriticalKEV

Advisory

Published 10 Mar 2025In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
10.0
base score, highest
EPSS
0.999
100th percentile
CISA KEV
Listed
since 1 Apr 2025
Charts affected
242
of 17,781 indexed, latest versions
Container images
198
deployed by those charts
Fix available
3 of 4
affected packages

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Carried by container images the latest versions of 242 of 17,781 indexed charts deploy, on 198 images.

Affected packageAffected versionsFixed inImages
Apache Tomcatbitnami9.0.809.0.991
tomcatbitnami9.0.80-19.0.991
tomcat-embed-coremaven8.5.4, 8.5.11, 8.5.14, 8.5.15+64 more9.0.99, 10.1.35197
tomcat-catalinamaven8.5.38, 8.5.82no fix listed2
OSV records
BIT-tomcat-2025-24813GHSA-83qj-6fr2-vhqg

Charts affected

242 by stars
ChartLatestAffected imagesRadar Score
bpjstk-serviceopenshift1.0.05 of 6See more

bpjstk-service openshift 1.0.0

5 of the 6 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
tomcat-embed-core@9.0.75
9.0.99
andrianrf/bpjstk-service:latest46abe878d9d8
tomcat-embed-core@9.0.38
9.0.99
andrianrf/bpjstk-simulator:latestb63fdb51d39d
tomcat-embed-core@9.0.38
9.0.99
andrianrf/iso-client:latestba560086ce15
tomcat-embed-core@9.0.38
9.0.99
andrianrf/iso-server:latest7da47f525c7d
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

34,671
redhat-springboot-restopenshift0.0.11 of 1See more

redhat-springboot-rest openshift 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
tomcat-embed-core@9.0.83
9.0.99

Open the chart page →

3,063
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
tomcat-embed-core@9.0.60
9.0.99

Open the chart page →

13,607
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
tomcat-embed-core@9.0.60
9.0.99

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
tomcat-embed-core@9.0.60
9.0.99

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
tomcat-embed-core@9.0.60
9.0.99

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
tomcat-embed-core@9.0.60
9.0.99

Open the chart page →

13,100
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
tomcat-embed-core@9.0.26
9.0.99

Open the chart page →

26,339
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-10.1.01 of 1See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:1.04d2eb25b9225
tomcat-embed-core@9.0.43
9.0.99

Open the chart page →

10,392
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
helloworldpauls-helm-charts2.0.01 of 1See more

helloworld pauls-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
paulczar/spring-helloworld:latestc7140cecd5f7
tomcat-embed-core@9.0.16
9.0.99

Open the chart page →

5,596
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
todo-apipb-todo-api-v10.1.01 of 2See more

todo-api pb-todo-api-v1 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
tomcat-embed-core@9.0.48
9.0.99

Open the chart page →

2,544
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

7,576
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
producer-helmproducer-app-helm-chart0.1.01 of 1See more

producer-helm producer-app-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
j4ckhunter/producer:1.006ba447609b12
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

2,564

Container images carrying it

198 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
beastob/url-shortener:1.0.299a49885ab33
tomcat-embed-core@9.0.53
9.0.99
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
tomcat-embed-core@9.0.36
9.0.99
1
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
tomcat-embed-core@9.0.53
9.0.99
1
choerodon/event-store-service:0.8.03c94c97f6f69
tomcat-embed-core@8.5.14
no fix listed
1
cnieg/gantt:1.1.2d4b478d76f2a
tomcat-embed-core@9.0.65
9.0.99
1
dannielkil/book-backend:lateste3b479a55a69
tomcat-embed-core@9.0.65
9.0.99
1
dellcloud/category:distributed02fc234353a9
tomcat-embed-core@9.0.36
9.0.99
1
dellcloud/pages:1.04d2eb25b9225
tomcat-embed-core@9.0.43
9.0.99
1
dniel/forwardauth:latestf67129ea1c64
tomcat-embed-core@9.0.21
9.0.99
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
tomcat-embed-core@10.1.19
10.1.35
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
tomcat-embed-core@10.1.19
10.1.35
1
elastictranscoder/media:627e21dc963ab3858c6b
tomcat-embed-core@9.0.46
9.0.99
1
elastictranscoder/media-storage:f6d861a026208b8c2359
tomcat-embed-core@9.0.46
9.0.99
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
tomcat-embed-core@9.0.46
9.0.99
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
tomcat-embed-core@9.0.46
9.0.99
1
fimperato/detected-info-notification:1.2.6-RELEASE6441f6545613
tomcat-embed-core@9.0.69
9.0.99
1
fimperato/detected-info-store:1.1.0-RELEASEe32920eedd3a
tomcat-embed-core@9.0.69
9.0.99
1
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
tomcat-embed-core@9.0.38
9.0.99
1
fimperato/static-src-people-detection:1.1.5-RELEASEc0cfaca070d9
tomcat-embed-core@9.0.69
9.0.99
1
flofree/base-project:2.1.16b6486c5f81e
tomcat-embed-core@9.0.78
9.0.99
1
flowable/flowable-rest:7.1.0b7ae287502cd
tomcat-embed-core@10.1.30
10.1.35
1
folioci/mod-ldp:latestb55696fd9065
tomcat-embed-core@10.1.19
10.1.35
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
tomcat-embed-core@10.1.15
10.1.35
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
tomcat-embed-core@9.0.41
9.0.99
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
tomcat-embed-core@9.0.37
9.0.99
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
tomcat-embed-core@9.0.37
9.0.99
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
tomcat-embed-core@9.0.37
9.0.99
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
tomcat-embed-core@9.0.37
9.0.99
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
tomcat-embed-core@9.0.37
9.0.99
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
tomcat-embed-core@10.1.31
10.1.35
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
tomcat-embed-core@10.1.31
10.1.35
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
tomcat-embed-core@10.1.31
10.1.35
1
gotson/komga:0.99.49b15ea6bfc30
tomcat-embed-core@9.0.46
9.0.99
1
gotson/komga:1.22.0ba892ab3e082
tomcat-embed-core@10.1.33
10.1.35
1
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
tomcat-embed-core@9.0.68
9.0.99
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
tomcat-embed-core@9.0.68
9.0.99
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
tomcat-embed-core@9.0.60
9.0.99
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
tomcat-embed-core@9.0.60
9.0.99
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
tomcat-embed-core@9.0.60
9.0.99
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
tomcat-embed-core@9.0.60
9.0.99
1
gurolakman/ussigw-core:1.0.48739565c3ea2
tomcat-embed-core@9.0.60
9.0.99
1
housewrecker/gaps:latestf417dd0a7547
tomcat-embed-core@9.0.60
9.0.99
1
huajuan6848/env-view-server:0.0.1-SNAPSHOTa303f3d9f6e0
tomcat-embed-core@10.1.11
10.1.35
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
tomcat-embed-core@8.5.15
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
tomcat-embed-core@8.5.15
no fix listed
1
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
tomcat-embed-core@10.1.19
10.1.35
1
j4ckhunter/consumer:1.00bb7a429e3e75
tomcat-embed-core@9.0.65
9.0.99
1
j4ckhunter/producer:1.006ba447609b12
tomcat-embed-core@9.0.65
9.0.99
1
jacobalberty/unifi:v7.1.664a3616625dda
tomcat-embed-core@9.0.58
9.0.99
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
tomcat-embed-core@9.0.65
9.0.99
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.