Anat Bremler-Barr
+2
·
Published
2025-05-29
·
Updated
2025-09-03
·
CVE-2025-48989
7.8
High
| Base vector | Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Apache Tomcat versions 11.0.0-M1 through 11.0.9
Apache Tomcat versions 10.1.0-M1 through 10.1.43
Apache Tomcat versions 9.0.0.M1 through 9.0.107
Description:
A flaw in resource shutdown or release within Apache Tomcat creates a vulnerability to the “Made You Reset” attack. Older, end-of-life versions may also be affected.
Recommendations:
Upgrade to Apache Tomcat version 11.0.10.
Upgrade to Apache Tomcat version 10.1.44.
Upgrade to Apache Tomcat version 9.0.108.
Fix
DoS
Improper Resource Release