Back to the CVE list
CVE-2025-24813 CISA KEV · Actively exploited

tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

CVSS score

8.6

EPSS probability

%99.9

Risk score

17.2

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Apache Tomcat 11.0.3 - Remote Code Execution

Exploit referenceSource updated: 07.04.2025 00:00:00

Nuclei: Apache Tomcat Path Equivalence - Remote Code Execution

Exploit reference

Dhananjayasj/CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE-

Public PoC

CVE-2025-24813 Apache Tomcat 11 1-day vulnerability research lab

Public PoC

ICT279 Vulnerability Detection and Mitigation Project using CVE-2025-24813 in an Internet Banking Environment

Public PoC

right payload for java CVE

Public PoC

Apache Tomcat CVE-2025-24813 本地复现、利用条件分析与 AI 辅助验证记录

Public PoC

University Project of developing a template for safely testing for the CVE 2025-24813 on a server. It is intentionally made to not leave any lasting artifacts on the server and does not disrupt its activities.

Public PoC

Si13NTTT/CVE-2025-24813

Public PoC

toyplan/cve-2025-24813

Public PoC

CVE-2025-24813 - Apache Tomcat RCE via Session Deserialization - PoC Exploit

Public PoC

yym8538/CVE-2025-24813

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-24813"