CVE-2025-24813 — Vulnerability intelligence

Apache — Tomcat

Published: 2025-03-10T16:44:03.715Z

CVSS

10

CISA KEV

Known exploitation

Original source text (not a translation)

Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486.

Sources

• Apache Tomcat Path Equivalence Vulnerability
• Original advisory
• Original advisory
• CVE-2025-24813