Back to the CVE list
CVE-2024-50379Proof of concept (PoC) published · CISASuited to automated attack · CISA

Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

CVSS score

9.8

EPSS probability

%31.8

Risk score

3.1

Published

1 y ago

OverviewPublic Exploits (15)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
SleepingBag945/CVE-2024-50379
GitHub

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp (★4)

Public PoCSource updated: 23.12.2024 17:20:38
G
iSee857/CVE-2024-50379-PoC
GitHub

Apache Tomcat（CVE-2024-50379）条件竞争致远程代码执行漏洞批量检测脚本 (★2)

Public PoCSource updated: 20.12.2024 15:29:36
G
ph0ebus/Tomcat-CVE-2024-50379-Poc
GitHub

RCE through a race condition in Apache Tomcat (★1)

Public PoCSource updated: 21.12.2024 17:57:38
G
dragonked2/CVE-2024-50379-POC
GitHub

This repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either unprotected or not present on the target server. (★1)

Public PoCSource updated: 26.12.2024 04:01:14
G
JFOZ1010/Nuclei-Template-CVE-2024-50379
GitHub

Repositorio para alojar un template de Nuclei para probar el CVE-2024-50379 (en fase de prueba) (★0)

Public PoCSource updated: 20.12.2024 12:54:32
G
Alchemist3dot14/CVE-2024-50379
GitHub

CVE-2024-50379 is a critical vulnerability affecting multiple versions of Apache Tomcat, an open source web server and servlet container widely used for deploying Java-based web applications. The vulnerability arises from a Time-of-Use (TOCTOU) race condition that occurs when compiling JavaServer Pages (JSPs). (★0)

Public PoCSource updated: 21.12.2024 06:55:35
G
dear-cell/CVE-2024-50379
GitHub

CVE-2024-50379利用 (★0)

Public PoCSource updated: 23.12.2024 23:13:15
G
lizhianyuguangming/CVE-2024-50379-exp
GitHub

CVE-2024-50379-exp (★0)

Public PoCSource updated: 25.12.2024 11:43:51
G
bigb0x/CVE-2024-50379
GitHub

Testing the latset Apache Tomcat CVE-2024-50379 Vuln (★0)

Public PoCSource updated: 26.12.2024 06:51:40
G
dkstar11q/CVE-2024-50379-nuclei
GitHub

Testing the latset Apache Tomcat CVE-2024-50379 Vuln (★0)

Public PoCSource updated: 26.12.2024 09:18:56
G
gomtaengi/CVE-2024-50379-exp
GitHub

CVE-2024-50379-exp (★0)

Public PoCSource updated: 28.12.2024 15:03:49
G
pwnosec/CVE-2024-50379
GitHub

ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is especially effective when the /uploads directory is either unprotected or missing on the target server. (★0)

Public PoCSource updated: 23.01.2025 20:40:30
G
paltrybelly/CVE-2024-50379
GitHub

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp (★0)

Public PoCSource updated: 27.02.2025 01:28:04
G
shoddykilom/CVE-2024-50379
GitHub

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp (★0)

Public PoCSource updated: 04.03.2025 07:22:59
G
unkemptpanc/CVE-2024-50379
GitHub

tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp (★0)

Public PoCSource updated: 11.03.2025 01:44:23

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-50379"