Threat intelligence / Vulnerability
CVE-2025-24813
Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486.
Vulnerability
TypeVulnerability
External ID—
First seen2025-04-01
Last seen2025-04-01
Confidence
—
Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486.
Labels
CISA KEV context
Vendor / productApache Tomcat
Added2025-04-01
Due date2025-04-22
2 recorded
Relationships
3 external