Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Time-of-Check Time-of-Use (TOCTOU)

🗓️ 03 Jan 2025 19:25:31Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 11 Views

Tomcat TOCTOU due to improper path canonicalization on case-insensitive systems with servlet write.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
20 Dec 202421:30
–githubexploit
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
19 Dec 202402:43
–githubexploit
GithubExploit		Exploit for CVE-2025-55752
29 Oct 202508:27
–githubexploit
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
23 Dec 202414:11
–githubexploit
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
25 Dec 202418:42
–githubexploit
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
18 Dec 202419:53
–githubexploit
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
30 Mar 202517:15
–githubexploit
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
20 Jun 202616:07
–githubexploit
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
20 Dec 202405:24
–githubexploit
GithubExploit		Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
21 Dec 202405:54
–githubexploit
Rows per page
Vulners
Node
OR
AND
tomcat9tomcat9Match9.0.40-1debian
debiandebian_linuxMatch999
AND
tomcat9tomcat9Match9.0.43-1debian
debiandebian_linuxMatch11
OR
apachetomcat-catalinaMatch10.1.18java
apachetomcat-catalinaMatch11.0.0-m25java
apachetomcat-catalinaMatch10.1.0-m11java
apachetomcat-catalinaMatch10.1.15java
apachetomcat-catalinaMatch11.0.0-m22java
apachetomcat-catalinaMatch10.1.8java
apachetomcat-catalinaMatch10.1.11java
apachetomcat-catalinaMatch11.0.0-m11java
apachetomcat-catalinaMatch11.0.0-m6java
apachetomcat-catalinaMatch11.0.0-m15java
apachetomcat-catalinaMatch10.1.0java
apachetomcat-catalinaMatch10.1.24java
apachetomcat-catalinaMatch10.1.5java
apachetomcat-catalinaMatch11.0.0-m24java
apachetomcat-catalinaMatch10.1.2java
apachetomcat-catalinaMatch11.0.0-m4java
apachetomcat-catalinaMatch10.1.0-m12java
apachetomcat-catalinaMatch10.1.23java
apachetomcat-catalinaMatch11.0.0-m14java
apachetomcat-catalinaMatch11.0.0-m17java
apachetomcat-catalinaMatch11.0.0-m5java
apachetomcat-catalinaMatch10.1.0-m8java
apachetomcat-catalinaMatch10.1.26java
apachetomcat-catalinaMatch11.0.0-m16java
apachetomcat-catalinaMatch10.1.12java
apachetomcat-catalinaMatch10.1.0-m5java
apachetomcat-catalinaMatch10.1.0-m7java
apachetomcat-catalinaMatch11.0.0-m9java
apachetomcat-catalinaMatch10.1.0-m6java
apachetomcat-catalinaMatch10.1.6java
apachetomcat-catalinaMatch11.0.0-m13java
apachetomcat-catalinaMatch11.0.0-m10java
apachetomcat-catalinaMatch10.1.14java
apachetomcat-catalinaMatch10.1.0-m15java
apachetomcat-catalinaMatch11.0.0-m26java
apachetomcat-catalinaMatch10.1.30java
apachetomcat-catalinaMatch11.0.0-m19java
apachetomcat-catalinaMatch10.1.0-m14java
apachetomcat-catalinaMatch10.1.16java
apachetomcat-catalinaMatch10.1.28java
apachetomcat-catalinaMatch10.1.0-m2java
apachetomcat-catalinaMatch10.1.29java
apachetomcat-catalinaMatch11.0.0-m12java
apachetomcat-catalinaMatch11.0.0-m7java
apachetomcat-catalinaMatch11.0.0-m20java
apachetomcat-catalinaMatch10.1.0-m10java
apachetomcat-catalinaMatch10.1.13java
apachetomcat-catalinaMatch10.1.9java
apachetomcat-catalinaMatch11.0.0-m1java
apachetomcat-catalinaMatch10.1.10java
apachetomcat-catalinaMatch10.1.0-m16java
apachetomcat-catalinaMatch11.0.0java
apachetomcat-catalinaMatch10.1.25java
apachetomcat-catalinaMatch11.0.0-m3java
apachetomcat-catalinaMatch10.1.0-m4java
apachetomcat-catalinaMatch10.1.0-m17java
apachetomcat-catalinaMatch10.1.4java
apachetomcat-catalinaMatch10.1.31java
apachetomcat-catalinaMatch10.1.19java
apachetomcat-catalinaMatch10.1.1java
apachetomcat-catalinaMatch11.0.0-m21java
apachetomcat-catalinaMatch10.1.0-m1java
apachetomcat-catalinaMatch10.1.7java
apachetomcat-catalinaMatch10.1.17java
apachetomcat-catalinaMatch11.0.0-m18java
apachetomcat-catalinaMatch10.1.20java
apachetomcat-catalinaMatch11.0.1java
apachetomcat-catalinaMatch10.1.33java
apachetomcat-embed-coreMatch10.1.0-m8java
apachetomcat-embed-coreMatch9.0.2java
apachetomcat-embed-coreMatch11.0.0-m25java
apachetomcat-embed-coreMatch9.0.19java
apachetomcat-embed-coreMatch10.1.0-m10java
apachetomcat-embed-coreMatch11.0.0-m24java
apachetomcat-embed-coreMatch9.0.45java
apachetomcat-embed-coreMatch9.0.0.m15java
apachetomcat-embed-coreMatch9.0.22java
apachetomcat-embed-coreMatch10.1.18java
apachetomcat-embed-coreMatch10.1.31java
apachetomcat-embed-coreMatch9.0.53java
apachetomcat-embed-coreMatch9.0.62java
apachetomcat-embed-coreMatch11.0.0-m13java
apachetomcat-embed-coreMatch11.0.0-m15java
apachetomcat-embed-coreMatch11.0.0-m20java
apachetomcat-embed-coreMatch9.0.59java
apachetomcat-embed-coreMatch10.1.0-m14java
apachetomcat-embed-coreMatch9.0.17java
apachetomcat-embed-coreMatch9.0.90java
apachetomcat-embed-coreMatch10.1.14java
apachetomcat-embed-coreMatch10.1.5java
apachetomcat-embed-coreMatch9.0.91java
apachetomcat-embed-coreMatch9.0.81java
apachetomcat-embed-coreMatch9.0.65java
apachetomcat-embed-coreMatch10.1.16java
apachetomcat-embed-coreMatch10.1.0-m12java
apachetomcat-embed-coreMatch9.0.1java
apachetomcat-embed-coreMatch10.1.12java
apachetomcat-embed-coreMatch10.1.0-m16java
apachetomcat-embed-coreMatch9.0.13java
apachetomcat-embed-coreMatch9.0.34java
apachetomcat-embed-coreMatch11.0.0-m7java
apachetomcat-embed-coreMatch11.0.0-m10java
apachetomcat-embed-coreMatch10.1.2java
apachetomcat-embed-coreMatch9.0.37java
apachetomcat-embed-coreMatch10.1.0-m4java
apachetomcat-embed-coreMatch9.0.0.m10java
apachetomcat-embed-coreMatch10.1.28java
apachetomcat-embed-coreMatch10.1.7java
apachetomcat-embed-coreMatch9.0.20java
apachetomcat-embed-coreMatch9.0.54java
apachetomcat-embed-coreMatch9.0.68java
apachetomcat-embed-coreMatch11.0.0-m12java
apachetomcat-embed-coreMatch9.0.8java
apachetomcat-embed-coreMatch9.0.80java
apachetomcat-embed-coreMatch9.0.5java
apachetomcat-embed-coreMatch9.0.76java
apachetomcat-embed-coreMatch9.0.74java
apachetomcat-embed-coreMatch9.0.0.m4java
apachetomcat-embed-coreMatch9.0.46java
apachetomcat-embed-coreMatch9.0.0.m22java
apachetomcat-embed-coreMatch9.0.11java
apachetomcat-embed-coreMatch9.0.30java
apachetomcat-embed-coreMatch9.0.0.m1java
apachetomcat-embed-coreMatch9.0.36java
apachetomcat-embed-coreMatch11.0.0-m3java
apachetomcat-embed-coreMatch9.0.79java
apachetomcat-embed-coreMatch10.1.8java
apachetomcat-embed-coreMatch10.1.0-m15java
apachetomcat-embed-coreMatch10.1.26java
apachetomcat-embed-coreMatch9.0.78java
apachetomcat-embed-coreMatch11.0.0-m11java
apachetomcat-embed-coreMatch10.1.0-m1java
apachetomcat-embed-coreMatch9.0.58java
apachetomcat-embed-coreMatch9.0.56java
apachetomcat-embed-coreMatch10.1.15java
apachetomcat-embed-coreMatch10.1.19java
apachetomcat-embed-coreMatch9.0.0.m18java
apachetomcat-embed-coreMatch9.0.10java
apachetomcat-embed-coreMatch9.0.21java
apachetomcat-embed-coreMatch9.0.72java
apachetomcat-embed-coreMatch11.0.0-m22java
apachetomcat-embed-coreMatch10.1.33java
apachetomcat-embed-coreMatch9.0.0.m19java
apachetomcat-embed-coreMatch9.0.35java
apachetomcat-embed-coreMatch9.0.0.m11java
apachetomcat-embed-coreMatch9.0.93java
apachetomcat-embed-coreMatch10.1.17java
apachetomcat-embed-coreMatch9.0.29java
apachetomcat-embed-coreMatch9.0.55java
apachetomcat-embed-coreMatch10.1.0java
apachetomcat-embed-coreMatch9.0.82java
apachetomcat-embed-coreMatch9.0.38java
apachetomcat-embed-coreMatch11.0.1java
apachetomcat-embed-coreMatch9.0.16java
apachetomcat-embed-coreMatch9.0.0.m8java
apachetomcat-embed-coreMatch9.0.6java
apachetomcat-embed-coreMatch10.1.10java
apachetomcat-embed-coreMatch9.0.0.m9java
apachetomcat-embed-coreMatch9.0.83java
apachetomcat-embed-coreMatch11.0.0-m17java
apachetomcat-embed-coreMatch9.0.12java
apachetomcat-embed-coreMatch9.0.63java
apachetomcat-embed-coreMatch10.1.0-m5java
apachetomcat-embed-coreMatch9.0.75java
apachetomcat-embed-coreMatch10.1.1java
apachetomcat-embed-coreMatch9.0.0.m27java
apachetomcat-embed-coreMatch10.1.6java
apachetomcat-embed-coreMatch9.0.95java
apachetomcat-embed-coreMatch9.0.87java
apachetomcat-embed-coreMatch10.1.20java
apachetomcat-embed-coreMatch10.1.9java
apachetomcat-embed-coreMatch10.1.11java
apachetomcat-embed-coreMatch9.0.7java
apachetomcat-embed-coreMatch9.0.50java
apachetomcat-embed-coreMatch10.1.0-m11java
apachetomcat-embed-coreMatch10.1.23java
apachetomcat-embed-coreMatch9.0.97java
apachetomcat-embed-coreMatch10.1.13java
apachetomcat-embed-coreMatch9.0.88java
apachetomcat-embed-coreMatch9.0.43java
apachetomcat-embed-coreMatch9.0.71java
apachetomcat-embed-coreMatch11.0.0java
apachetomcat-embed-coreMatch9.0.0.m6java
apachetomcat-embed-coreMatch11.0.0-m16java
apachetomcat-embed-coreMatch9.0.0.m25java
apachetomcat-embed-coreMatch9.0.39java
apachetomcat-embed-coreMatch9.0.0.m26java
apachetomcat-embed-coreMatch9.0.69java
apachetomcat-embed-coreMatch9.0.33java
apachetomcat-embed-coreMatch10.1.0-m2java
apachetomcat-embed-coreMatch11.0.0-m1java
apachetomcat-embed-coreMatch9.0.64java
apachetomcat-embed-coreMatch9.0.73java
apachetomcat-embed-coreMatch9.0.70java
apachetomcat-embed-coreMatch9.0.44java
apachetomcat-embed-coreMatch9.0.52java
apachetomcat-embed-coreMatch11.0.0-m4java
apachetomcat-embed-coreMatch10.1.25java
apachetomcat-embed-coreMatch9.0.0.m21java
apachetomcat-embed-coreMatch10.1.0-m17java
apachetomcat-embed-coreMatch9.0.0.m17java
apachetomcat-embed-coreMatch9.0.48java
apachetomcat-embed-coreMatch9.0.89java
apachetomcat-embed-coreMatch9.0.94java
apachetomcat-embed-coreMatch9.0.14java
apachetomcat-embed-coreMatch9.0.4java
apachetomcat-embed-coreMatch11.0.0-m26java
apachetomcat-embed-coreMatch9.0.24java
apachetomcat-embed-coreMatch9.0.86java
apachetomcat-embed-coreMatch9.0.31java
apachetomcat-embed-coreMatch10.1.0-m7java
apachetomcat-embed-coreMatch10.1.29java
apachetomcat-embed-coreMatch11.0.0-m9java
apachetomcat-embed-coreMatch11.0.0-m14java
apachetomcat-embed-coreMatch9.0.41java
apachetomcat-embed-coreMatch9.0.27java
apachetomcat-embed-coreMatch10.1.24java
apachetomcat-embed-coreMatch9.0.26java
apachetomcat-embed-coreMatch9.0.85java
apachetomcat-embed-coreMatch11.0.0-m6java
apachetomcat-embed-coreMatch9.0.67java
apachetomcat-embed-coreMatch11.0.0-m19java
apachetomcat-embed-coreMatch9.0.0.m3java
apachetomcat-embed-coreMatch9.0.60java
apachetomcat-embed-coreMatch10.1.30java
apachetomcat-embed-coreMatch9.0.0.m20java
apachetomcat-embed-coreMatch10.1.4java
apachetomcat-embed-coreMatch9.0.84java
apachetomcat-embed-coreMatch11.0.0-m18java
apachetomcat-embed-coreMatch11.0.0-m21java
apachetomcat-embed-coreMatch11.0.0-m5java
apachetomcat-embed-coreMatch10.1.0-m6java
apachetomcat-embed-coreMatch9.0.0.m13java
apachetomcat-embed-coreMatch9.0.96java
apachetomcat-embed-coreMatch9.0.40java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Jun 2026 03:18Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.19.8
EPSS0.44312
SSVC
Tomcattime of checktime of usefile path canonicalizationcase insensitive systemsdefault servlet write
11