Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

🗓️ 17 Dec 2024 15:31:43Reported by GitHub Advisory DatabaseType

TOCTOU vulnerability in Apache Tomcat allows RCE on case insensitive file systems. Upgrade recommended.

Reporter	Title	Published	Views	Family All 292
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	20 Dec 202421:30	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	19 Dec 202402:43	–	githubexploit
GithubExploit	Exploit for CVE-2025-55752	29 Oct 202508:27	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	23 Dec 202414:11	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	25 Dec 202418:42	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	18 Dec 202419:53	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	30 Mar 202517:15	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	20 Dec 202405:24	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	21 Dec 202405:54	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat	23 Dec 202407:20	–	githubexploit

Vulners

Node

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-50379
lists	www.lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r
github	www.github.com/apache/tomcat/commit/05ddeeaa54df1e2dc427d0164bedd6b79f78d81f
github	www.github.com/apache/tomcat/commit/43b507ebac9d268b1ea3d908e296cc6e46795c00
github	www.github.com/apache/tomcat/commit/631500b0c9b2a2a2abb707e3de2e10a5936e5d41
github	www.github.com/apache/tomcat/commit/684247ae85fa633b9197b32391de59fc54703842
github	www.github.com/apache/tomcat/commit/8554f6b1722b33a2ce8b0a3fad37825f3a75f2d2
github	www.github.com/apache/tomcat/commit/cc7a98b57c6dc1df21979fcff94a36e068f4456c
tomcat	www.tomcat.apache.org/security-10.html
tomcat	www.tomcat.apache.org/security-11.html

03 Nov 2025 21:31Current

8.9High risk

Vulners AI Score8.9

CVSS 3.19.8

EPSS0.84587

SSVC