CVE-2025-49125

Apache Tomcat is vulnerable to an authentication bypass when using PreResources or PostResources mounted at paths other than the web application root. An attacker can access these resources via an unexpected path that may lack the intended security constraints. Affected versions include 11.0.0-M1...