漏洞描述
Apache Tomcat 是一个开源的 Java Servlet 容器，广泛用于运行基于 Java 的 Web 应用程序。该漏洞（CVE-2025-24813）允许远程攻击者通过特定的恶意请求在目标系统上执行任意命令，从而完全控制受影响的服务器。
Apache Tomcat 远程命令执行(CVE-2025-24813)
PoC代码
暂无相关漏洞推荐
- Apache Tomcat URL重写绕过漏洞 （CVE-2025-55752）
- tomcat-default-login: Apahce Tomcat Manager Default Login
- POC CVE-2020-13935: Apache Tomcat WebSocket Frame Payload Length Validation Denial of Service
- POC CVE-2007-2449: Apache Tomcat 4.x-7.x - Cross-Site Scripting
- CVE-2016-8735: Apache Tomcat - Remote Code Execution via JMX Ports
- POC CVE-2017-12615: Apache Tomcat Servers - Remote Code Execution
- POC CVE-2017-12617: Apache Tomcat - Remote Code Execution
- POC CVE-2018-11759: Apache Tomcat JK Connect <=1.2.44 - Manager Access
- POC CVE-2018-11784: Apache Tomcat - Open Redirect
- POC CVE-2019-0221: Apache Tomcat - Cross-Site Scripting
- POC CVE-2019-0232: Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution
- POC CVE-2020-9484: Apache Tomcat Remote Command Execution
- POC CVE-2025-24813: Apache Tomcat Path Equivalence - Remote Code Execution