PT-2025-10603 · Apache +11 · Apache Tomcat +11

Sw0Rd1Ight · Published 2025-02-10 · Updated 2025-09-17 · CVE-2025-24813

Positive Technologies · (AI Summary)

CVSS v2.0

10

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions:

Apache Tomcat versions 9.0.0.M1 through 9.0.98, 10.1.0-M1 through 10.1.34, and 11.0.0-M1 through 11.0.2.

Description:

The vulnerability in Apache Tomcat is caused by an error in handling uploaded session files and deserialization. Exploitation of the vulnerability allows an unauthenticated attacker to upload an arbitrary file to the server for subsequent execution. A public exploit is available for the vulnerability, and instances of exploitation have been recorded.

Recommendations:

To address the vulnerability, users are advised to upgrade to version 11.0.3, 10.1.35, or 9.0.99, which fixes the issue. Additionally, users can mitigate the problem by reverting to the default servlet configuration (readonly="true"), disabling partial PUT support, and avoiding the storage of confidential files in subdirectories of public upload paths.

Exploit

Fix

RCE

HTTP Request/Response Smuggling

Deserialization of Untrusted Data

Weakness Enumeration

CWE-706

CWE-444

CWE-502

CWE-44

Related Identifiers

ALSA-2025:3645

ALSA-2025:3683

ALSA-2025:7494

ALSA-2025:7497

ALT-PU-2025-4735

ALT-PU-2025-7452

BDU:2025-02511

BIT-TOMCAT-2025-24813

CESA-2025_3683

CVE-2025-24813

DLA-4108-1

DSA-5893-1

GHSA-83QJ-6FR2-VHQG

INFSA-2025_3645

INFSA-2025_3683

MGASA-2025-0105

OPENSUSE-SU-2025:14896-1

OPENSUSE-SU-2025:14897-1

OPENSUSE-SU-2025_1024-1

OPENSUSE-SU-2025_1126-1

RHSA-2025:3454

RHSA-2025:3608

RHSA-2025:3645

RHSA-2025:3646

RHSA-2025:3647

RHSA-2025:3683

RHSA-2025:3684

RHSA-2025:7494

RHSA-2025:7497

RHSA-2025_3645

RHSA-2025_3683

SUSE-SU-2025:0954-1

SUSE-SU-2025:1024-1

SUSE-SU-2025:1126-1

SUSE-SU-2025_0954-1

USN-7525-1

USN-7525-2

Affected Products

Alt Linux

Almalinux

Apache Tomcat

Astra Linux

Centos

Debian

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 510

• 🔥 https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md · Exploit
• 🔥 https://github.com/absholi7ly/POC-CVE-2025-24813 · Exploit
• 🔥 https://github.com/SleepingBag945/CVE-2024-50379 · Exploit
• 🔥 https://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc · Exploit
• 🔥 https://github.com/iSee857/CVE-2025-24813-PoC · Exploit
• 🔥 https://github.com/iSee857/CVE-2024-50379-PoC · Exploit
• 🔥 https://github.com/lizhianyuguangming/CVE-2024-50379-exp · Exploit
• 🔥 https://github.com/v3153/CVE-2024-50379-POC · Exploit
• 🔥 https://github.com/n0n-zer0/Spring-Boot-Tomcat-CVE-2025-24813 · Exploit
• 🔥 https://github.com/La3B0z/CVE-2025-24813-POC · Exploit
• 🔥 https://github.com/msadeghkarimi/CVE-2025-24813-Exploit · Exploit
• https://osv.dev/vulnerability/MGASA-2025-0105 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2025-7452 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-24813 · Vendor Advisory