Description
Apache Tomcat 是一个开源的 Java Servlet 容器，广泛用于运行基于 Java 的 Web 应用程序。该漏洞（CVE-2025-24813）允许远程攻击者通过特定的恶意请求在目标系统上执行任意命令，从而完全控制受影响的服务器。
Apache Tomcat 远程命令执行(CVE-2025-24813)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-24813
https://tomcat.apache.org/security-11.html
https://www.rapid7.com/blog/post/2025/03/19/etr-apache-tomcat-cve-2025-24813-what-you-need-to-know/
https://www.herodevs.com/blog-posts/cve-2025-24813-remote-code-execution-in-apache-tomcat-via-partial-put-path-equivalence
https://github.com/absholi7ly/POC-CVE-2025-24813
https://www.exploit-db.com/exploits/52134
https://www.keysight.com/blogs/en/tech/nwvs/2025/05/07/cve-2025-24813
https://www.zscaler.com/blogs/security-research/cve-2025-24813-apache-tomcat-vulnerable-rce-attacks
https://access.redhat.com/security/cve/cve-2025-24813
https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq
https://www.cve.org/CVERecord?id=CVE-2025-24813
https://www.akamai.com/blog/security-research/march-apache-tomcat-path-equivalence-traffic-detections-mitigations