Apache Under the Lens: Tomcat’s Partial PUT and Camel’s Header Hijack
In March 2025, Apache disclosed CVE-2025-24813 in Tomcat, a remote code execution flaw affecting versions 9.0.0.M1 through 9.0.98, 10.1.0-M1 through 10.1.34, and 11.0.0-M1 through 11.0.2, alongside two Camel flaws, CVE-2025-27636 and CVE-2025-29891,...