CVE-2025-24813 1

CVE-2025-24813: Apache Tomcat Path Equivalence Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 01, 2025

Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request. This vulnerability can be chained with CVE‑2026‑34486.

Vulnerabilities & Patching