CVE-2025-55668

Apache Tomcat is susceptible to a Session Fixation vulnerability through the rewrite valve . This issue affects versions 11.0.0-M1 through 11.0.7 , 10.1.0-M1 through 10.1.41 , and 9.0.0.M1 through 9.0.105 , as well as certain older EOL versions. The vulnerability allows for session hijacking, whi...