Skip to main content
عربي
logo

NCSC-VD-2503-001-04

Severity Level: Low

Reference No.: NCSC-VD-2503-001-04

Apache

Description

CVE-2025-24813: A remote code execution (RCE) vulnerability exists within the write-enabled Default Servlet of Apache Tomcat, enabling attackers to execute arbitrary code, perform information disclosure, or inject malicious content into uploaded files.

Vulnerabilities

  • CVE-2025-24813

    A remote code execution (RCE) vulnerability exists within the write-enabled Default Servlet of Apache Tomcat, enabling attackers to execute arbitrary code, perform information disclosure, or inject malicious content into uploaded files.

References