CVE Listesine Dön
CVE-2025-24813 CISA KEV · Aktif Sömürülüyor

tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

CVSS Skor

8.6

EPSS İhtimal

%99.9

Risk Skoru

17.2

Yayın

1 yıl önce

Overview (Genel Bakış)Public Exploits (0)Newsroom (Haberler)Vulnerability Timeline
Yama yalnızca bazı ürün veya sürümlerde mevcut

Kanıt listesindeki ürün ve sürüm eşleşmesini kontrol edin; bazı varyantlar hâlâ etkileniyor olabilir.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2025-24813 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

A flaw was found in Apache Tomcat. In certain conditions and configurations, this vulnerability allows a remote attacker to exploit a path equivalence flaw to view file system contents and add malicious content via a write-enabled Default Servlet in Apache Tomcat. For the vulnerability to be exploited, the following conditions must be true: writes to the default servlet are enabled (disabled by default), sensitive file uploads are sub-directories of a target URL for public uploads, attackers know the names of the files, and those files are subject to partial PUT uploads enabled by default. If an application uses file-based session persistence with default storage and includes exploitable libraries, remote code execution (RCE) is possible.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2025-24813 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1Red Hatred_hat_enterprise_linux_6:tomcat6 İncele
2Red Hatred_hat_enterprise_linux_6:tomcat6-admin-webapps İncele
3Red Hatred_hat_enterprise_linux_6:tomcat6-docs-webapp İncele
4Red Hatred_hat_enterprise_linux_6:tomcat6-el-2.1-api İncele
5Red Hatred_hat_enterprise_linux_6:tomcat6-javadoc İncele
6Red Hatred_hat_enterprise_linux_6:tomcat6-jsp-2.1-api İncele
7Red Hatred_hat_enterprise_linux_6:tomcat6-lib İncele
8Red Hatred_hat_enterprise_linux_6:tomcat6-log4j İncele
9Red Hatred_hat_enterprise_linux_6:tomcat6-servlet-2.5-api İncele
10Red Hatred_hat_enterprise_linux_6:tomcat6-webapps İncele
11Red Hatred_hat_enterprise_linux_6:tomcat6.src İncele
12Red Hat7Server-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
13Red Hat7Server-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el7jws.src İncele
14Red Hat7Server-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
15Red Hat7Server-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
16Red Hat7Server-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
17Red Hat7Server-JWS-5.8:jws5-tomcat-java-jdk11-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
18Red Hat7Server-JWS-5.8:jws5-tomcat-java-jdk8-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
19Red Hat7Server-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
20Red Hat7Server-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
21Red Hat7Server-JWS-5.8:jws5-tomcat-lib-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
22Red Hat7Server-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
23Red Hat7Server-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
24Red Hat7Server-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-8.redhat_00008.1.el7jws.noarch İncele
25Red Hat8Base-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
26Red Hat8Base-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el8jws.src İncele
27Red Hat8Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
28Red Hat8Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
29Red Hat8Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
30Red Hat8Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
31Red Hat8Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
32Red Hat8Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
33Red Hat8Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
34Red Hat8Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
35Red Hat8Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-8.redhat_00008.1.el8jws.noarch İncele
36Red Hat8Base-JWS-6.1:jws6-tomcat-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
37Red Hat8Base-JWS-6.1:jws6-tomcat-0:10.1.36-6.redhat_00007.1.el8jws.src İncele
38Red Hat8Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
39Red Hat8Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
40Red Hat8Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
41Red Hat8Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
42Red Hat8Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
43Red Hat8Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
44Red Hat8Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
45Red Hat8Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
46Red Hat8Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-6.redhat_00007.1.el8jws.noarch İncele
47Red Hat9Base-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
48Red Hat9Base-JWS-5.8:jws5-tomcat-0:9.0.87-8.redhat_00008.1.el9jws.src İncele
49Red Hat9Base-JWS-5.8:jws5-tomcat-admin-webapps-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
50Red Hat9Base-JWS-5.8:jws5-tomcat-docs-webapp-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
51Red Hat9Base-JWS-5.8:jws5-tomcat-el-3.0-api-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
52Red Hat9Base-JWS-5.8:jws5-tomcat-javadoc-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
53Red Hat9Base-JWS-5.8:jws5-tomcat-jsp-2.3-api-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
54Red Hat9Base-JWS-5.8:jws5-tomcat-lib-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
55Red Hat9Base-JWS-5.8:jws5-tomcat-selinux-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
56Red Hat9Base-JWS-5.8:jws5-tomcat-servlet-4.0-api-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
57Red Hat9Base-JWS-5.8:jws5-tomcat-webapps-0:9.0.87-8.redhat_00008.1.el9jws.noarch İncele
58Red Hat9Base-JWS-6.1:jws6-tomcat-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
59Red Hat9Base-JWS-6.1:jws6-tomcat-0:10.1.36-6.redhat_00007.1.el9jws.src İncele
60Red Hat9Base-JWS-6.1:jws6-tomcat-admin-webapps-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
61Red Hat9Base-JWS-6.1:jws6-tomcat-docs-webapp-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
62Red Hat9Base-JWS-6.1:jws6-tomcat-el-5.0-api-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
63Red Hat9Base-JWS-6.1:jws6-tomcat-javadoc-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
64Red Hat9Base-JWS-6.1:jws6-tomcat-jsp-3.1-api-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
65Red Hat9Base-JWS-6.1:jws6-tomcat-lib-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
66Red Hat9Base-JWS-6.1:jws6-tomcat-selinux-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
67Red Hat9Base-JWS-6.1:jws6-tomcat-servlet-6.0-api-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
68Red Hat9Base-JWS-6.1:jws6-tomcat-webapps-0:10.1.36-6.redhat_00007.1.el9jws.noarch İncele
69Red HatAppStream-10.0.Z:tomcat-1:10.1.36-1.el10_0.noarch İncele
70Red HatAppStream-10.0.Z:tomcat-1:10.1.36-1.el10_0.src İncele
71Red HatAppStream-10.0.Z:tomcat-admin-webapps-1:10.1.36-1.el10_0.noarch İncele
72Red HatAppStream-10.0.Z:tomcat-docs-webapp-1:10.1.36-1.el10_0.noarch İncele
73Red HatAppStream-10.0.Z:tomcat-el-5.0-api-1:10.1.36-1.el10_0.noarch İncele
74Red HatAppStream-10.0.Z:tomcat-jsp-3.1-api-1:10.1.36-1.el10_0.noarch İncele
75Red HatAppStream-10.0.Z:tomcat-lib-1:10.1.36-1.el10_0.noarch İncele
76Red HatAppStream-10.0.Z:tomcat-servlet-6.0-api-1:10.1.36-1.el10_0.noarch İncele
77Red HatAppStream-10.0.Z:tomcat-webapps-1:10.1.36-1.el10_0.noarch İncele
78Red HatAppStream-10.0.Z:tomcat9-1:9.0.87-5.el10_0.noarch İncele
79Red HatAppStream-10.0.Z:tomcat9-1:9.0.87-5.el10_0.src İncele
80Red HatAppStream-10.0.Z:tomcat9-admin-webapps-1:9.0.87-5.el10_0.noarch İncele
81Red HatAppStream-10.0.Z:tomcat9-docs-webapp-1:9.0.87-5.el10_0.noarch İncele
82Red HatAppStream-10.0.Z:tomcat9-el-3.0-api-1:9.0.87-5.el10_0.noarch İncele
83Red HatAppStream-10.0.Z:tomcat9-jsp-2.3-api-1:9.0.87-5.el10_0.noarch İncele
84Red HatAppStream-10.0.Z:tomcat9-lib-1:9.0.87-5.el10_0.noarch İncele
85Red HatAppStream-10.0.Z:tomcat9-servlet-4.0-api-1:9.0.87-5.el10_0.noarch İncele
86Red HatAppStream-10.0.Z:tomcat9-webapps-1:9.0.87-5.el10_0.noarch İncele
87Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.3.noarch İncele
88Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-1:9.0.87-1.el8_10.3.src İncele
89Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_10.3.noarch İncele
90Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_10.3.noarch İncele
91Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_10.3.noarch İncele
92Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_10.3.noarch İncele
93Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-lib-1:9.0.87-1.el8_10.3.noarch İncele
94Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_10.3.noarch İncele
95Red HatAppStream-8.10.0.Z.MAIN.EUS:tomcat-webapps-1:9.0.87-1.el8_10.3.noarch İncele
96Red HatAppStream-8.8.0.Z.EUS:tomcat-1:9.0.87-1.el8_8.4.noarch İncele
97Red HatAppStream-8.8.0.Z.EUS:tomcat-1:9.0.87-1.el8_8.4.src İncele
98Red HatAppStream-8.8.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el8_8.4.noarch İncele
99Red HatAppStream-8.8.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el8_8.4.noarch İncele
100Red HatAppStream-8.8.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el8_8.4.noarch İncele
101Red HatAppStream-8.8.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el8_8.4.noarch İncele
102Red HatAppStream-8.8.0.Z.EUS:tomcat-lib-1:9.0.87-1.el8_8.4.noarch İncele
103Red HatAppStream-8.8.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el8_8.4.noarch İncele
104Red HatAppStream-8.8.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el8_8.4.noarch İncele
105Red HatAppStream-9.2.0.Z.EUS:tomcat-1:9.0.87-1.el9_2.3.noarch İncele
106Red HatAppStream-9.2.0.Z.EUS:tomcat-1:9.0.87-1.el9_2.3.src İncele
107Red HatAppStream-9.2.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_2.3.noarch İncele
108Red HatAppStream-9.2.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_2.3.noarch İncele
109Red HatAppStream-9.2.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_2.3.noarch İncele
110Red HatAppStream-9.2.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_2.3.noarch İncele
111Red HatAppStream-9.2.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_2.3.noarch İncele
112Red HatAppStream-9.2.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_2.3.noarch İncele
113Red HatAppStream-9.2.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_2.3.noarch İncele
114Red HatAppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.3.noarch İncele
115Red HatAppStream-9.4.0.Z.EUS:tomcat-1:9.0.87-1.el9_4.3.src İncele
116Red HatAppStream-9.4.0.Z.EUS:tomcat-admin-webapps-1:9.0.87-1.el9_4.3.noarch İncele
117Red HatAppStream-9.4.0.Z.EUS:tomcat-docs-webapp-1:9.0.87-1.el9_4.3.noarch İncele
118Red HatAppStream-9.4.0.Z.EUS:tomcat-el-3.0-api-1:9.0.87-1.el9_4.3.noarch İncele
119Red HatAppStream-9.4.0.Z.EUS:tomcat-jsp-2.3-api-1:9.0.87-1.el9_4.3.noarch İncele
120Red HatAppStream-9.4.0.Z.EUS:tomcat-lib-1:9.0.87-1.el9_4.3.noarch İncele
121Red HatAppStream-9.4.0.Z.EUS:tomcat-servlet-4.0-api-1:9.0.87-1.el9_4.3.noarch İncele
122Red HatAppStream-9.4.0.Z.EUS:tomcat-webapps-1:9.0.87-1.el9_4.3.noarch İncele
123Red HatAppStream-9.5.0.Z.MAIN:tomcat-1:9.0.87-2.el9_5.1.noarch İncele
124Red HatAppStream-9.5.0.Z.MAIN:tomcat-1:9.0.87-2.el9_5.1.src İncele
125Red HatAppStream-9.5.0.Z.MAIN:tomcat-admin-webapps-1:9.0.87-2.el9_5.1.noarch İncele
126Red HatAppStream-9.5.0.Z.MAIN:tomcat-docs-webapp-1:9.0.87-2.el9_5.1.noarch İncele
127Red HatAppStream-9.5.0.Z.MAIN:tomcat-el-3.0-api-1:9.0.87-2.el9_5.1.noarch İncele
128Red HatAppStream-9.5.0.Z.MAIN:tomcat-jsp-2.3-api-1:9.0.87-2.el9_5.1.noarch İncele
129Red HatAppStream-9.5.0.Z.MAIN:tomcat-lib-1:9.0.87-2.el9_5.1.noarch İncele
130Red HatAppStream-9.5.0.Z.MAIN:tomcat-servlet-4.0-api-1:9.0.87-2.el9_5.1.noarch İncele
131Red HatAppStream-9.5.0.Z.MAIN:tomcat-webapps-1:9.0.87-2.el9_5.1.noarch İncele
132Red HatRed Hat JBoss Web Server 5 İncele
133Red HatRed Hat JBoss Web Server 6 İncele
134apachetomcat İncele
Total Affected Vendor: 2|Products: 134

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Bu CVE benim Red Hat ürünümü etkiliyor mu?

Sonuçlar doğrudan Red Hat CSAF VEX ürün durumundan gelir; tahmin değildir.

Düzeltme yayımlandı

Bu ürün dalı için Red Hat düzeltmesi yayımlanmış.

Red Hat düzeltmeleri

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
8.6cvss_v3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:LRed Hat

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Kısmi yama

22 düzeltme kanıtı bulundu; en az 11 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

redhat

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç
redhat

Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files. The References section of this erratum contains a download link for the update. You must be logged in to download the update.

Kaynağı aç
redhat

Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files. The References section of this erratum contains a download link for the update. You must be logged in to download the update.

Kaynağı aç
redhat

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Bu CVE CISA KEV kataloğunda aktif sömürülen olarak işaretli; ancak henüz doğrulanmış, indirilebilir bir public PoC veya Metasploit modülü bulunamadı. Aktif sömürü kanıtı public exploit kodu bulunduğu anlamına gelmez.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-24813 is associated with the following CWEs:

CWE-41: Common Weakness Enumeration Entry CWE-41

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-24813 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

Canonical URLvendor-advisoryRHBZ#2351129vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2025-24813vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2025-24813vendor-advisoryhttps://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgqvendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryBefore applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258patchBefore applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patchFor details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258patch

CVSS Vektör Radar Grafiği

8.6 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityLow

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges RequiredNone (Gerekmiyor)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)Low (Düşük)

Kısmi yama

22 düzeltme kanıtı bulundu; en az 11 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

Üreticiyi takip et

RH
Red Hat logo
Red Hat
A
apache logo
apache

Zafiyet Türü (CWE & CAPEC)

CWE-41

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-24813"