CVE-2025-24813

Summary

CVE-2025-24813 is a vulnerability in Apache Tomcat affecting versions 11.0.0-M1 through 11.0.2, 10.1.0-M1 through 10.1.34, and 9.0.0.M1 through 9.0.98. Malicious users with the ability to write to the default servlet, enabled support for partial PUT, and knowledge of security sensitive file names could view or modify these files. Moreover, if an application uses Tomcat's file-based session persistence and includes a susceptible library, this vulnerability could lead to remote code execution. Users are advised to upgrade to the fixed versions 11.0.3, 10.1.35, or 9.0.99.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.