Apache Tomcat
criticalCVSS 9.8
Partial PUT requests can write files outside the intended directory, enabling remote code execution when sessions persist to disk.
Dampak
Remote code execution or disclosure of files readable by the Tomcat process.
Perbaikan
Upgrade to 9.0.99, 10.1.35, 11.0.3 or later and disable write-enabled default servlet.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2025-24813Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2025-24813.
Jalankan audit gratis