StackRadar

CVE-2025-24813

CriticalKEV

Advisory

Published 10 Mar 2025In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
10.0
base score, highest
EPSS
0.999
100th percentile
CISA KEV
Listed
since 1 Apr 2025
Charts affected
242
of 17,781 indexed, latest versions
Container images
198
deployed by those charts
Fix available
3 of 4
affected packages

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Carried by container images the latest versions of 242 of 17,781 indexed charts deploy, on 198 images.

Affected packageAffected versionsFixed inImages
Apache Tomcatbitnami9.0.809.0.991
tomcatbitnami9.0.80-19.0.991
tomcat-embed-coremaven8.5.4, 8.5.11, 8.5.14, 8.5.15+64 more9.0.99, 10.1.35197
tomcat-catalinamaven8.5.38, 8.5.82no fix listed2
OSV records
BIT-tomcat-2025-24813GHSA-83qj-6fr2-vhqg

Charts affected

242 by stars
ChartLatestAffected imagesRadar Score
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
reportportalreportportal5.7.23 of 8See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
tomcat-embed-core@9.0.37
9.0.99
reportportal/service-authorization:5.7.09e73114dbd15
tomcat-embed-core@9.0.37
9.0.99
reportportal/service-jobs:5.7.2dc166c58485a
tomcat-embed-core@9.0.43
9.0.99

Open the chart page →

25,737
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
nacossaber0.1.111 of 1See more

nacos saber 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
nacos/nacos-server:v2.1.0dcf04549c6d7
tomcat-embed-core@9.0.38
9.0.99

Open the chart page →

3,978
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
seataseataVerified publisher0.1.01 of 1See more

seata seata 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
seataio/seata-server:latest703b5de7f1a6
tomcat-embed-core@9.0.83
9.0.99

Open the chart page →

4,245
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
tomcat-embed-core@8.5.34
no fix listed

Open the chart page →

8,098
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
tomcat-embed-core@9.0.63
9.0.99

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
tomcat-embed-core@9.0.29
9.0.99

Open the chart page →

12,513
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
hetzner-iroboslamdev0.0.51 of 1See more

hetzner-irobo slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
slamdev/hetzner-irobo:0.0.13ca20c184c55
tomcat-embed-core@9.0.53
9.0.99

Open the chart page →

3,754
smtp-fake-serversomeblackmagic0.1.01 of 1See more

smtp-fake-server someblackmagic 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
someblackmagic/smtp-fake-server:latest0d63ba37a560
tomcat-embed-core@9.0.41
9.0.99

Open the chart page →

4,278
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
umsappstacksimplifyVerified publisher1.0.01 of 3See more

umsapp stacksimplify 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
tomcat-embed-core@9.0.21
9.0.99

Open the chart page →

6,101
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

11,554
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
tomcat-embed-core@8.5.23
no fix listed

Open the chart page →

11,841
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
tomcat-embed-core@9.0.58
9.0.99

Open the chart page →

14,493
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.53 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

3 of the 6 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
fimperato/detected-info-notification:1.2.6-RELEASE6441f6545613
tomcat-embed-core@9.0.69
9.0.99
fimperato/detected-info-store:1.1.0-RELEASEe32920eedd3a
tomcat-embed-core@9.0.69
9.0.99
fimperato/static-src-people-detection:1.1.5-RELEASEc0cfaca070d9
tomcat-embed-core@9.0.69
9.0.99

Open the chart page →

13,646
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
streamastreama1.0.11 of 2See more

streama streama 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
just1not2/streama:1.10.48a2305192dec
tomcat-embed-core@8.5.11
no fix listed

Open the chart page →

8,554
student-producerstudentproducerVerified publisher2.0.01 of 1See more

student-producer studentproducer 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
aroralalit/student-producer:1.0.02a094f597b36
tomcat-embed-core@9.0.75
9.0.99

Open the chart page →

3,018
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
shenyutest-helm2.4.211 of 2See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.4.2e8b7c4ddd069
tomcat-embed-core@9.0.29
9.0.99

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
tomcat-embed-core@9.0.63
9.0.99
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
tomcat-embed-core@9.0.63
9.0.99
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
tomcat-embed-core@9.0.63
9.0.99
thingsboard/tb-node:3.4.1645f43b688f7
tomcat-embed-core@9.0.63
9.0.99

Open the chart page →

25,394
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
tomcat-embed-core@10.1.15
10.1.35

Open the chart page →

3,221
configservertwomartensVerified publisher0.2.01 of 1See more

configserver twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
2martens/configserver:latestbf1cdb80239d
tomcat-embed-core@10.1.28
10.1.35

Open the chart page →

2,144
pagesvictor-pages1.0.01 of 3See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tomcat-embed-core@9.0.50
9.0.99

Open the chart page →

7,885
pageswalter1.0.01 of 3See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
tomcat-embed-core@8.5.46
no fix listed

Open the chart page →

9,397
webapp-db-javawebapp-db-java-repo0.1.01 of 2See more

webapp-db-java webapp-db-java-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
arturisimo/webapp-db-java:v2c95524e90b57
tomcat-embed-core@9.0.56
9.0.99

Open the chart page →

2,566
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
tomcat-embed-core@8.5.41
no fix listed

Open the chart page →

5,460
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
tomcat-embed-core@10.1.10
10.1.35

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
tomcat-embed-core@9.0.71
9.0.99

Open the chart page →

5,846

Container images carrying it

198 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
seataio/seata-server:1.5.1ee1ed55f4144
tomcat-embed-core@9.0.55
9.0.99
1
seldonio/apife:0.2.7ba81b17f00eb
tomcat-embed-core@8.5.34
no fix listed
1
seldonio/apife:0.3.1eea0d3f578ca
tomcat-embed-core@8.5.34
no fix listed
1
seldonio/cluster-manager:0.2.729e362bb1ba2
tomcat-embed-core@8.5.34
no fix listed
1
slamdev/hetzner-irobo:0.0.13ca20c184c55
tomcat-embed-core@9.0.53
9.0.99
1
someblackmagic/smtp-fake-server:latest0d63ba37a560
tomcat-embed-core@9.0.41
9.0.99
1
stanislovesid/oracle-host-app:14fe1ed26e194
tomcat-embed-core@9.0.54
9.0.99
1
sysnet4admin/colosseum-agg:logbc25b152d88e
tomcat-embed-core@10.1.34
10.1.35
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
tomcat-embed-core@9.0.63
9.0.99
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
tomcat-embed-core@9.0.63
9.0.99
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
tomcat-embed-core@9.0.63
9.0.99
1
thingsboard/tb-node:3.4.1645f43b688f7
tomcat-embed-core@9.0.63
9.0.99
1
thingsboard/tb-node:3.6.0f40a542832c4
tomcat-embed-core@9.0.73
9.0.99
1
thmmniii/fbs-core:v1.27.15438517d9fc2
tomcat-embed-core@9.0.75
9.0.99
1
treskon/portrait:DEV-latest88e813f22347
tomcat-embed-core@10.1.33
10.1.35
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tomcat-embed-core@9.0.50
9.0.99
1
vincentgwzhang/k8sforjava:latesta9139f2cd98f
tomcat-embed-core@10.1.34
10.1.35
1
vitalii1992/account-service:latest0e694d94551d
tomcat-embed-core@10.1.8
10.1.35
1
vitalii1992/analytics-service:latest8e798836ecea
tomcat-embed-core@10.1.8
10.1.35
1
vitalii1992/api-gateway-service:latestaabe6ac39356
tomcat-embed-core@10.1.8
10.1.35
1
vitalii1992/order-service:latest07c4a8833ce4
tomcat-embed-core@10.1.8
10.1.35
1
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
tomcat-embed-core@10.1.8
10.1.35
1
vlebediantsev/config-server-another:lateste7f20450d2ae
tomcat-embed-core@9.0.65
9.0.99
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
tomcat-embed-core@9.0.64
9.0.99
1
vlebediantsev/logic-ms:latestdf8bf38c535b
tomcat-embed-core@9.0.64
9.0.99
1
vlebediantsev/registration-ms-final:latest427af418b75e
tomcat-embed-core@9.0.64
9.0.99
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
tomcat-embed-core@9.0.64
9.0.99
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
tomcat-embed-core@9.0.74
9.0.99
1
xuxueli/xxl-job-admin:2.4.0640093c35fd6
tomcat-embed-core@9.0.71
9.0.99
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
tomcat-embed-core@10.1.10
10.1.35
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
tomcat-embed-core@9.0.71
9.0.99
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
tomcat-embed-core@9.0.30
9.0.99
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
tomcat-embed-core@10.1.17
10.1.35
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
tomcat-embed-core@10.1.8
10.1.35
1
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
tomcat-embed-core@10.1.34
10.1.35
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
tomcat-embed-core@10.1.33
10.1.35
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
tomcat-embed-core@10.1.33
10.1.35
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
tomcat-embed-core@9.0.36
9.0.99
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
tomcat-embed-core@9.0.37
9.0.99
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
tomcat-embed-core@9.0.65
9.0.99
1
ghcr.io/stacksimplify/kube-usermgmt-webapp:1.0.0-mysqldb41b45003c6b6
tomcat-embed-core@9.0.21
9.0.99
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
tomcat-embed-core@9.0.70
9.0.99
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
tomcat-embed-core@10.1.16
10.1.35
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
tomcat-embed-core@10.1.18
10.1.35
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
tomcat-embed-core@10.1.18
10.1.35
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
tomcat-embed-core@10.1.18
10.1.35
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
tomcat-embed-core@9.0.83
9.0.99
1
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
tomcat-embed-core@9.0.46
9.0.99
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.