CVE-2025-24813

🗓️ 10 Mar 2025 17:15:35Reported by [email protected]Type

Path Equivalence in Apache Tomcat allows Remote Code Execution and Information Disclosure risks.

Reporter	Title	Published	Views	Family All 324
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Tomcat	3 Jul 202500:31	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Tomcat	14 Mar 202507:36	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Tomcat	14 Mar 202503:11	–	githubexploit
GithubExploit	Exploit for CVE-2025-55752	29 Oct 202508:27	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Tomcat	11 May 202519:50	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Tomcat	22 Mar 202515:16	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Tomcat	12 Jul 202502:40	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Tomcat	27 Apr 202513:50	–	githubexploit
GithubExploit	Exploit for CVE-2025-2783	26 May 202512:51	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Tomcat	10 Dec 202509:53	–	githubexploit

NVD

Node

apache tomcatRange<9.0.99

apache tomcatRange10.1.1–10.1.35

apache tomcatRange11.0.1–11.0.3

apache tomcatMatch10.1.0milestone1

apache tomcatMatch10.1.0milestone10

apache tomcatMatch10.1.0milestone11

apache tomcatMatch10.1.0milestone12

apache tomcatMatch10.1.0milestone13

apache tomcatMatch10.1.0milestone14

apache tomcatMatch10.1.0milestone15

apache tomcatMatch10.1.0milestone16

apache tomcatMatch10.1.0milestone17

apache tomcatMatch10.1.0milestone18

apache tomcatMatch10.1.0milestone19

apache tomcatMatch10.1.0milestone2

apache tomcatMatch10.1.0milestone20

apache tomcatMatch10.1.0milestone3

apache tomcatMatch10.1.0milestone4

apache tomcatMatch10.1.0milestone5

apache tomcatMatch10.1.0milestone6

apache tomcatMatch10.1.0milestone7

apache tomcatMatch10.1.0milestone8

apache tomcatMatch10.1.0milestone9

apache tomcatMatch11.0.0milestone1

apache tomcatMatch11.0.0milestone10

apache tomcatMatch11.0.0milestone11

apache tomcatMatch11.0.0milestone12

apache tomcatMatch11.0.0milestone13

apache tomcatMatch11.0.0milestone14

apache tomcatMatch11.0.0milestone15

apache tomcatMatch11.0.0milestone16

apache tomcatMatch11.0.0milestone17

apache tomcatMatch11.0.0milestone18

apache tomcatMatch11.0.0milestone19

apache tomcatMatch11.0.0milestone2

apache tomcatMatch11.0.0milestone20

apache tomcatMatch11.0.0milestone21

apache tomcatMatch11.0.0milestone22

apache tomcatMatch11.0.0milestone23

apache tomcatMatch11.0.0milestone24

apache tomcatMatch11.0.0milestone25

apache tomcatMatch11.0.0milestone3

apache tomcatMatch11.0.0milestone4

apache tomcatMatch11.0.0milestone5

apache tomcatMatch11.0.0milestone6

apache tomcatMatch11.0.0milestone7

apache tomcatMatch11.0.0milestone8

apache tomcatMatch11.0.0milestone9

Node

debian debian_linuxMatch11.0

Node

AND

netapp bootstrap_osMatch-

netapp hci_compute_nodeMatch-

Source	Link
vicarius	www.vicarius.io/vsociety/posts/cve-2025-24813-tomcat-mitigation-vulnerability
github	www.github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md
vicarius	www.vicarius.io/vsociety/posts/cve-2025-24813-mitigate-apache-tomcat-rce
security	www.security.netapp.com/advisory/ntap-20250321-0001/
vicarius	www.vicarius.io/vsociety/posts/cve-2025-24813-detect-apache-tomcat-rce
vicarius	www.vicarius.io/vsociety/posts/cve-2025-24813-tomcat-detect-vulnerability
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
lists	www.lists.debian.org/debian-lts-announce/2025/04/msg00003.html
openwall	www.openwall.com/lists/oss-security/2025/03/10/5
lists	www.lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq

17 Jun 2026 08:59Current

CVSS 3.19.8 - 10

EPSS0.99925

apache tomcat vulnerability remote code execution information disclosure default servlet issue security sensitive files version upgrade needed