Critical 1 exploited CVE DLA-4108-1 1 CVE

tomcat9 - security update

Published Apr 1, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	tomcat9	9.0.43-2~deb11u12

Vulnerabilities 1

Critical 10.0

CVE-2025-24813 Exploited Public exploit Scanner template EPSS 100%

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 t…

Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven

Mar 10, 2025
KEV Apr 1, 2025