Lucene search

CVE-2024-50379 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

🗓️ 17 Dec 2024 12:54:34Reported by apacheType

RCE vulnerability in Apache Tomcat due to TOCTOU issue in JSP compilation; upgrade recommended.

Reporter	Title	Published	Views	Family All 86
GithubExploit	Exploit for CVE-2024-50379	25 Dec 202418:42	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	19 Dec 202402:43	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	21 Dec 202405:54	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	25 Dec 202402:41	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	25 Dec 202421:50	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	20 Dec 202405:24	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	23 Dec 202414:11	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	18 Dec 202419:53	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	20 Dec 202421:30	–	githubexploit
GithubExploit	Exploit for CVE-2024-50379	23 Jan 202510:28	–	githubexploit

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Tomcat",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "11.0.1",
        "status": "affected",
        "version": "11.0.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "10.1.33",
        "status": "affected",
        "version": "10.1.0-M1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.0.97",
        "status": "affected",
        "version": "9.0.0.M1",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Dec 2024 12:34Current

EPSS0.0004

CWE-367