Apache.Tomcat.CVE-2025-24813.Remote.Code.Execution

Description

This indicates an attack attempt on a Remote Code Execution vulnerability in Apache Tomcat.
The vulnerability is due to improper handling of uploaded session files and unsafe deserialization. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitation could gain control of the affected application.

Outbreak Alert

FortiGuard Labs has identified ongoing attack attempts aimed at exploiting the recently discovered Apache Tomcat remote code execution vulnerability, CVE-2025-24813. If successful, attackers could gain access to sensitive security files, allowing them to view or inject arbitrary content and potentially execute code remotely on target systems.

View the full Outbreak Alert Report

Affected Products

Apache Tomcat 9.0.0.M1 to 9.0.98
Apache Tomcat 10.1.0-M1 to 10.1.34
Apache Tomcat 11.0.0-M1 to 11.0.2

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://tomcat.apache.org/security-9.html
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html