A vulnerability identified as problematic has been detected in Apache Tomcat up to 9.0.98/10.1.34/11.0.2. Affected by this issue is some unknown functionality of the component Partial PUT Handler. Performing a manipulation results in path equivalence: 'file.name' (internal dot).
This vulnerability is identified as CVE-2025-24813. The attack can be initiated remotely. Additionally, an exploit exists.
You should upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2025-24813 | Apache Tomcat up to 9.0.98/10.1.34/11.0.2 Partial PUT path equivalence (EDB-52134 / Nessus ID 232530)
A vulnerability identified as problematic has been detected in Apache Tomcat up to 9.0.98/10.1.34/11.0.2. Affected by this issue is some unknown functionality of the component Partial PUT Handler. Performing a manipulation results in path…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR