EXPOSURES › CVE-2025-24813

CVE-2025-24813

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-04-01 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-24813 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wild

Apache Tomcat's path equivalence vulnerability allows remote code execution via partial PUT requests, currently being actively exploited in the wild.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

apache · vendor Tomcat · product

DESCRIPTION

Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.