CVE-2025-24813

Exploitation Conditions DefaultServlet Write Function Enabled: Must configure readonly=false in web.xml Partial PUT Request Support: Tomcat supports chunked upload by default File Session Persistence Enabled: Must configure PersistentManager and FileStore in context.xml Deserialization Exploit...

POC-CVE-2025-24813

CVE-2025-24813 – 演示环境 PoC 此仓库包含一个简单应用，用于观察 CVE-2025-24813 的行为。该漏洞是 Apache Tomcat 中一个较新的漏洞，与 DefaultServlet 在启用写入功能 readonly=false 时的使用有关，允许通过 HTTP PUT（支持 partial PUT / Content-Range）进行不安全的写入操作，可能导致覆盖敏感文件（包括会话文件），从而在发生恶意反序列化时实现 RCE 场景。 关于此 PoC 该应用使用以下组件：...

CVE-2017-12615

CVE-2017-12615 - Apache Tomcat リモートコード実行 RCE CVE-2017-12615 は、HTTP PUT リクエストが有効な Microsoft Windows 上で動作する Apache Tomcat 7.0.0 から 7.0.79 に影響を与えるリモートコード実行 RCE の脆弱性です。 この脆弱性は、DefaultServlet の readonly パラメータが false に設定されている場合に、Tomcat がアップロードされた JSP ファイルを誤って処理することに起因します。このような条件下では、認証されていない攻撃者が悪意のある JS...

CVE-2025-24813

説明 このリポジトリは、CVE-2025-24813 Tomcat 最新のRCE再現環境です。 学習研究目的のみに使用してください！ 利用条件 アプリケーションでDefaultServletの書き込み機能が有効になっていること（デフォルトでは無効） アプリケーションがpartial PUTリクエストをサポートしており、悪意のあるシリアライズデータをセッションファイルに書き込めること（デフォルトで有効） アプリケーションがTomcatのファイルセッション永続化を使用し、デフォルトのセッション保存場所を使用していること（追加設定が必要）...

Spring-Boot-Tomcat-CVE-2025-24813

CVE-2025-24813: Apache 1. 説明 Tomcatは、2つの別々の脆弱性により影響を受けます。1つ目はDefaultServletの弱点で、部分的なPUT（partial put）を許可して一時ディレクトリに書き込めることです。 参照: https://github.com/apache/tomcat/blob/f2a274bc00cf73670a614999561c69a391b5e35f/java/org/apache/catalina/servlets/DefaultServlet.javaL608...

CVE-2017-12615-Home-Lab

CVE-2017-12615 Tomcat: 通过JSP上传实现远程代码执行 本实验室模拟漏洞 CVE-2017-12615 Tomcat: 通过JSP上传实现远程代码执行 由设置 readonly=false 导致，允许通过 HTTP PUT 上传文件，包括可执行命令的 .jsp 文件（远程代码执行） 特点 Apache Tomcat 7.0.79 （存在漏洞） 使用 DefaultServlet 覆盖并设置 readonly=false 可以使用 PUT 上传将 .jsp 文件放置到 ROOT web 目录 支持通过 web shell 执行命令...

Exploit for Deserialization of Untrusted Data in Apache Tomcat

利用条件 + DefaultServlet 写入功能启用：需在 web.xml 中配置 readonly=false...

Apache Tomcat Remote Code Execution Vulnerability

Apache Tomcat is an open source lightweight Java Web server and Servlet container , designed to run Java Servlet and JSP core tools designed to support dynamic content processing and hosting of static resources , is the cornerstone of small and medium-sized Java Web application development and...

Apache Tomcat 环境问题漏洞

Apache Tomcat is an open source lightweight Java Web server and Servlet container , designed to run Java Servlet and JSP core tools designed to support dynamic content processing and hosting of static resources , is the cornerstone of small and medium-sized Java Web application development and...

The vulnerability of the DefaultServlet server servlet in the Apache Tomcat application server allows a attacker to execute arbitrary code.

The vulnerability of the DefaultServlet server component in the Apache Tomcat application server is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE-SU-2024:4106-1 Security update for tomcat

This update for tomcat fixes the following issues: - Update to Tomcat 9.0.97 Fixed CVEs: + CVE-2024-52316: If the Jakarta Authentication fails with an exception, set a 500 status bsc1233434 Catalina + Add: Add support for the new Servlet API method HttpServletResponse.sendEarlyHints. markt + Add:...

SUSE-SU-2024:4105-1 Security update for tomcat10

This update for tomcat10 fixes the following issues: - Update to Tomcat 10.1.33 Fixed CVEs: + CVE-2024-52316: If the Jakarta Authentication fails with an exception, set a 500 status bsc1233434 Catalina + Add: Add support for the new Servlet API method HttpServletResponse.sendEarlyHints. markt +...

SUSE CVE-2018-12536

In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a...

K01869532: Eclipse Jetty vulnerability CVE-2019-10241

Security Advisory Description In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of...

DOS vulnerability for Quoted Quality CSV headers

Impact When Jetty handles a request containing request headers with a large number of “quality” i.e. q parameters such as what are seen on the Accept, Accept-Encoding, and Accept-Language request headers, the server may enter a denial of service DoS state due to high CPU usage while sorting the...

CVE-2017-5664

A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page. Mitigation If it is necessary to have the DefaultServlet propert...

jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents...

jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents...

The vulnerability of the DefaultServlet component of the Jetty HTTP server allows a attacker to gain unauthorized access to protected information.

The vulnerability of the DefaultServlet component in the Jetty HTTP server is related to errors in error handling when incorrect requests are used. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by displaying the InvalidPathException message,...

CVE-2019-10241

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents...