Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kq3c-qp43-dqgg
Summary
Aliases
0
alias CVE-2025-24813
Fixed_packages
0
url pkg:apache/tomcat@9.0.99
purl pkg:apache/tomcat@9.0.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.99
1
url pkg:apache/tomcat@10.1.35
purl pkg:apache/tomcat@10.1.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.35
2
url pkg:apache/tomcat@11.0.3
purl pkg:apache/tomcat@11.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.3
3
url pkg:maven/org.apache.tomcat/tomcat@9.0.99
purl pkg:maven/org.apache.tomcat/tomcat@9.0.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.99
4
url pkg:maven/org.apache.tomcat/tomcat@10.1.35
purl pkg:maven/org.apache.tomcat/tomcat@10.1.35
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.35
5
url pkg:maven/org.apache.tomcat/tomcat@11.0.3
purl pkg:maven/org.apache.tomcat/tomcat@11.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.3
Affected_packages
0
url pkg:apache/tomcat@9.0.0%2BM1
purl pkg:apache/tomcat@9.0.0%2BM1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2d54-u8sa-n3d8
1
vulnerability VCID-2scg-4ctu-nub4
2
vulnerability VCID-3ft6-jaeb-cfd9
3
vulnerability VCID-3gvy-wdjq-wkbn
4
vulnerability VCID-46mj-73rn-tkg6
5
vulnerability VCID-4mmj-yd4b-bqc9
6
vulnerability VCID-579s-dxd6-f3ek
7
vulnerability VCID-5j78-np3z-rfda
8
vulnerability VCID-61p6-f9vu-7fca
9
vulnerability VCID-61xw-8vnm-vkcx
10
vulnerability VCID-67rb-z7qk-zke9
11
vulnerability VCID-7duy-zbjz-pkh2
12
vulnerability VCID-8btx-vpre-pugb
13
vulnerability VCID-9eka-xfyd-mqh1
14
vulnerability VCID-9kef-ww6g-47df
15
vulnerability VCID-9ptv-guzs-kyg1
16
vulnerability VCID-9w58-wv96-dfhb
17
vulnerability VCID-9zgk-pw69-4kdb
18
vulnerability VCID-a156-e8a1-pufm
19
vulnerability VCID-b9hb-uzqm-wbcp
20
vulnerability VCID-bb6z-a8sb-rkdb
21
vulnerability VCID-bhwy-a7r9-4ubc
22
vulnerability VCID-bqkn-zvm1-4kd6
23
vulnerability VCID-bxhh-7y6z-vya3
24
vulnerability VCID-c8b5-23zz-cudd
25
vulnerability VCID-cvz2-m9hs-7ker
26
vulnerability VCID-dk5d-3ebq-yfbn
27
vulnerability VCID-dmrz-z2gw-8yfv
28
vulnerability VCID-eehy-pgzv-vudx
29
vulnerability VCID-erf4-k7u3-9ug9
30
vulnerability VCID-evbs-epz4-ekdy
31
vulnerability VCID-f5cj-hyb5-6bd1
32
vulnerability VCID-f8s4-weeq-jqg1
33
vulnerability VCID-ffqg-mkqf-xqgh
34
vulnerability VCID-fr2m-dquh-u7hu
35
vulnerability VCID-g11a-wp5s-2qdh
36
vulnerability VCID-g4ne-v1t9-h3dj
37
vulnerability VCID-g8re-u2zv-t7ep
38
vulnerability VCID-gcsz-99fk-qkdx
39
vulnerability VCID-gq7b-ee2j-6kb4
40
vulnerability VCID-hgbg-akgm-pbfj
41
vulnerability VCID-j384-wyej-27g8
42
vulnerability VCID-kq3c-qp43-dqgg
43
vulnerability VCID-kxvn-6xbg-4fep
44
vulnerability VCID-m9zt-3fd4-3bhw
45
vulnerability VCID-mhyu-u4w9-nkee
46
vulnerability VCID-n9v8-hdbp-quca
47
vulnerability VCID-p384-yv4k-nyam
48
vulnerability VCID-p7x2-ejss-ffd1
49
vulnerability VCID-phjv-amj5-2fab
50
vulnerability VCID-pmx1-hkph-4qhd
51
vulnerability VCID-pzss-nqu6-pufa
52
vulnerability VCID-rcd8-dg2e-3keh
53
vulnerability VCID-ruvk-p5t4-tqbh
54
vulnerability VCID-rwwv-g43z-dkd1
55
vulnerability VCID-s6p4-xq69-6fb4
56
vulnerability VCID-twp1-3h1f-r3de
57
vulnerability VCID-ujnj-2f48-e7ag
58
vulnerability VCID-v6kq-kg7h-p3bq
59
vulnerability VCID-wpew-vv5h-r7c5
60
vulnerability VCID-xdgh-k9su-4bes
61
vulnerability VCID-xpgj-16r8-3ya9
62
vulnerability VCID-xqpc-truy-2fhv
63
vulnerability VCID-y3ba-g4qn-93hg
64
vulnerability VCID-y5je-ud4g-ufdc
65
vulnerability VCID-yj65-daxr-7ud8
66
vulnerability VCID-yy72-4q61-n7gu
67
vulnerability VCID-z6g3-j67d-87hc
68
vulnerability VCID-zd9x-yf4u-eqgf
69
vulnerability VCID-zpvv-4hjw-g3bt
70
vulnerability VCID-zsuz-c5yt-ukca
71
vulnerability VCID-zyvy-3tq7-7fcm
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.0%252BM1
1
url pkg:apache/tomcat@9.0.98
purl pkg:apache/tomcat@9.0.98
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.98
2
url pkg:apache/tomcat@10.1.0-M1
purl pkg:apache/tomcat@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1maq-ar71-p3ha
1
vulnerability VCID-1mms-9rqw-xqhq
2
vulnerability VCID-2kta-z43d-2uhm
3
vulnerability VCID-35fm-apgj-jqd3
4
vulnerability VCID-4pgx-mk91-xyba
5
vulnerability VCID-4qzp-up1c-2kfq
6
vulnerability VCID-5fj8-g5jf-wybu
7
vulnerability VCID-5j78-np3z-rfda
8
vulnerability VCID-61p6-f9vu-7fca
9
vulnerability VCID-61xw-8vnm-vkcx
10
vulnerability VCID-64r1-zcg6-qfb8
11
vulnerability VCID-67rb-z7qk-zke9
12
vulnerability VCID-6t1m-v4ym-4uhs
13
vulnerability VCID-8btx-vpre-pugb
14
vulnerability VCID-9248-b5q8-2bc7
15
vulnerability VCID-9g9v-wsbr-hkde
16
vulnerability VCID-9ptv-guzs-kyg1
17
vulnerability VCID-9w58-wv96-dfhb
18
vulnerability VCID-a8x5-hzkb-vuf4
19
vulnerability VCID-b9hb-uzqm-wbcp
20
vulnerability VCID-bqkn-zvm1-4kd6
21
vulnerability VCID-c8b5-23zz-cudd
22
vulnerability VCID-dk5d-3ebq-yfbn
23
vulnerability VCID-eehy-pgzv-vudx
24
vulnerability VCID-ffqg-mkqf-xqgh
25
vulnerability VCID-g9rk-me3p-1fey
26
vulnerability VCID-h11m-szkg-p7c5
27
vulnerability VCID-hdnj-g415-2bbw
28
vulnerability VCID-j4ut-s3e4-qqh7
29
vulnerability VCID-jz35-ynpa-sqfq
30
vulnerability VCID-kdhy-vpg2-nqgh
31
vulnerability VCID-kq3c-qp43-dqgg
32
vulnerability VCID-kxvn-6xbg-4fep
33
vulnerability VCID-mvgq-kb92-dqf8
34
vulnerability VCID-nafh-ss66-efc1
35
vulnerability VCID-p7x2-ejss-ffd1
36
vulnerability VCID-pmx1-hkph-4qhd
37
vulnerability VCID-rx6f-x5cc-6bef
38
vulnerability VCID-ryjx-b2fp-5bbc
39
vulnerability VCID-s6p4-xq69-6fb4
40
vulnerability VCID-twp1-3h1f-r3de
41
vulnerability VCID-wpew-vv5h-r7c5
42
vulnerability VCID-wtt7-38dy-gbec
43
vulnerability VCID-xdgh-k9su-4bes
44
vulnerability VCID-xym1-6dp5-t7d7
45
vulnerability VCID-y5je-ud4g-ufdc
46
vulnerability VCID-z1yq-nwk7-1kba
47
vulnerability VCID-z6g3-j67d-87hc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.0-M1
3
url pkg:apache/tomcat@10.1.34
purl pkg:apache/tomcat@10.1.34
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.34
4
url pkg:apache/tomcat@11.0.0-M1
purl pkg:apache/tomcat@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1maq-ar71-p3ha
1
vulnerability VCID-1mms-9rqw-xqhq
2
vulnerability VCID-35fm-apgj-jqd3
3
vulnerability VCID-3e3b-6dse-s3gf
4
vulnerability VCID-4qzp-up1c-2kfq
5
vulnerability VCID-5j78-np3z-rfda
6
vulnerability VCID-61p6-f9vu-7fca
7
vulnerability VCID-61xw-8vnm-vkcx
8
vulnerability VCID-64r1-zcg6-qfb8
9
vulnerability VCID-67rb-z7qk-zke9
10
vulnerability VCID-6t1m-v4ym-4uhs
11
vulnerability VCID-71uq-hgqp-b3a1
12
vulnerability VCID-8btx-vpre-pugb
13
vulnerability VCID-9248-b5q8-2bc7
14
vulnerability VCID-9ptv-guzs-kyg1
15
vulnerability VCID-9w58-wv96-dfhb
16
vulnerability VCID-b4g7-nvey-5bh3
17
vulnerability VCID-b9hb-uzqm-wbcp
18
vulnerability VCID-bqkn-zvm1-4kd6
19
vulnerability VCID-c8b5-23zz-cudd
20
vulnerability VCID-dk5d-3ebq-yfbn
21
vulnerability VCID-eehy-pgzv-vudx
22
vulnerability VCID-ek4k-3m72-qqbf
23
vulnerability VCID-ffqg-mkqf-xqgh
24
vulnerability VCID-g9rk-me3p-1fey
25
vulnerability VCID-h11m-szkg-p7c5
26
vulnerability VCID-hdnj-g415-2bbw
27
vulnerability VCID-jz35-ynpa-sqfq
28
vulnerability VCID-kdhy-vpg2-nqgh
29
vulnerability VCID-kq3c-qp43-dqgg
30
vulnerability VCID-kxvn-6xbg-4fep
31
vulnerability VCID-mvgq-kb92-dqf8
32
vulnerability VCID-nafh-ss66-efc1
33
vulnerability VCID-p7x2-ejss-ffd1
34
vulnerability VCID-pmx1-hkph-4qhd
35
vulnerability VCID-rx6f-x5cc-6bef
36
vulnerability VCID-ryjx-b2fp-5bbc
37
vulnerability VCID-s6p4-xq69-6fb4
38
vulnerability VCID-twp1-3h1f-r3de
39
vulnerability VCID-wpew-vv5h-r7c5
40
vulnerability VCID-xdgh-k9su-4bes
41
vulnerability VCID-y5je-ud4g-ufdc
42
vulnerability VCID-z1yq-nwk7-1kba
43
vulnerability VCID-z6g3-j67d-87hc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.0-M1
5
url pkg:apache/tomcat@11.0.2
purl pkg:apache/tomcat@11.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.2
6
url pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2d54-u8sa-n3d8
1
vulnerability VCID-2scg-4ctu-nub4
2
vulnerability VCID-3ft6-jaeb-cfd9
3
vulnerability VCID-3gvy-wdjq-wkbn
4
vulnerability VCID-46mj-73rn-tkg6
5
vulnerability VCID-4mmj-yd4b-bqc9
6
vulnerability VCID-579s-dxd6-f3ek
7
vulnerability VCID-5j78-np3z-rfda
8
vulnerability VCID-61p6-f9vu-7fca
9
vulnerability VCID-61xw-8vnm-vkcx
10
vulnerability VCID-67rb-z7qk-zke9
11
vulnerability VCID-7duy-zbjz-pkh2
12
vulnerability VCID-8btx-vpre-pugb
13
vulnerability VCID-9eka-xfyd-mqh1
14
vulnerability VCID-9kef-ww6g-47df
15
vulnerability VCID-9ptv-guzs-kyg1
16
vulnerability VCID-9w58-wv96-dfhb
17
vulnerability VCID-9zgk-pw69-4kdb
18
vulnerability VCID-a156-e8a1-pufm
19
vulnerability VCID-b9hb-uzqm-wbcp
20
vulnerability VCID-bb6z-a8sb-rkdb
21
vulnerability VCID-bhwy-a7r9-4ubc
22
vulnerability VCID-bqkn-zvm1-4kd6
23
vulnerability VCID-bxhh-7y6z-vya3
24
vulnerability VCID-c8b5-23zz-cudd
25
vulnerability VCID-cvz2-m9hs-7ker
26
vulnerability VCID-dk5d-3ebq-yfbn
27
vulnerability VCID-dmrz-z2gw-8yfv
28
vulnerability VCID-eehy-pgzv-vudx
29
vulnerability VCID-erf4-k7u3-9ug9
30
vulnerability VCID-evbs-epz4-ekdy
31
vulnerability VCID-f5cj-hyb5-6bd1
32
vulnerability VCID-f8s4-weeq-jqg1
33
vulnerability VCID-ffqg-mkqf-xqgh
34
vulnerability VCID-fr2m-dquh-u7hu
35
vulnerability VCID-g11a-wp5s-2qdh
36
vulnerability VCID-g4ne-v1t9-h3dj
37
vulnerability VCID-g8re-u2zv-t7ep
38
vulnerability VCID-gcsz-99fk-qkdx
39
vulnerability VCID-gq7b-ee2j-6kb4
40
vulnerability VCID-hgbg-akgm-pbfj
41
vulnerability VCID-j384-wyej-27g8
42
vulnerability VCID-kq3c-qp43-dqgg
43
vulnerability VCID-kxvn-6xbg-4fep
44
vulnerability VCID-m9zt-3fd4-3bhw
45
vulnerability VCID-mhyu-u4w9-nkee
46
vulnerability VCID-n9v8-hdbp-quca
47
vulnerability VCID-p384-yv4k-nyam
48
vulnerability VCID-p7x2-ejss-ffd1
49
vulnerability VCID-phjv-amj5-2fab
50
vulnerability VCID-pmx1-hkph-4qhd
51
vulnerability VCID-pzss-nqu6-pufa
52
vulnerability VCID-rcd8-dg2e-3keh
53
vulnerability VCID-ruvk-p5t4-tqbh
54
vulnerability VCID-rwwv-g43z-dkd1
55
vulnerability VCID-s6p4-xq69-6fb4
56
vulnerability VCID-twp1-3h1f-r3de
57
vulnerability VCID-ujnj-2f48-e7ag
58
vulnerability VCID-v6kq-kg7h-p3bq
59
vulnerability VCID-wpew-vv5h-r7c5
60
vulnerability VCID-xdgh-k9su-4bes
61
vulnerability VCID-xpgj-16r8-3ya9
62
vulnerability VCID-xqpc-truy-2fhv
63
vulnerability VCID-y3ba-g4qn-93hg
64
vulnerability VCID-y5je-ud4g-ufdc
65
vulnerability VCID-yj65-daxr-7ud8
66
vulnerability VCID-yy72-4q61-n7gu
67
vulnerability VCID-z6g3-j67d-87hc
68
vulnerability VCID-zd9x-yf4u-eqgf
69
vulnerability VCID-zpvv-4hjw-g3bt
70
vulnerability VCID-zsuz-c5yt-ukca
71
vulnerability VCID-zyvy-3tq7-7fcm
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
7
url pkg:maven/org.apache.tomcat/tomcat@9.0.98
purl pkg:maven/org.apache.tomcat/tomcat@9.0.98
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.98
8
url pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
purl pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1maq-ar71-p3ha
1
vulnerability VCID-1mms-9rqw-xqhq
2
vulnerability VCID-2kta-z43d-2uhm
3
vulnerability VCID-35fm-apgj-jqd3
4
vulnerability VCID-4pgx-mk91-xyba
5
vulnerability VCID-4qzp-up1c-2kfq
6
vulnerability VCID-5fj8-g5jf-wybu
7
vulnerability VCID-5j78-np3z-rfda
8
vulnerability VCID-61p6-f9vu-7fca
9
vulnerability VCID-61xw-8vnm-vkcx
10
vulnerability VCID-64r1-zcg6-qfb8
11
vulnerability VCID-67rb-z7qk-zke9
12
vulnerability VCID-6t1m-v4ym-4uhs
13
vulnerability VCID-8btx-vpre-pugb
14
vulnerability VCID-9248-b5q8-2bc7
15
vulnerability VCID-9g9v-wsbr-hkde
16
vulnerability VCID-9ptv-guzs-kyg1
17
vulnerability VCID-9w58-wv96-dfhb
18
vulnerability VCID-a8x5-hzkb-vuf4
19
vulnerability VCID-b9hb-uzqm-wbcp
20
vulnerability VCID-bqkn-zvm1-4kd6
21
vulnerability VCID-c8b5-23zz-cudd
22
vulnerability VCID-dk5d-3ebq-yfbn
23
vulnerability VCID-eehy-pgzv-vudx
24
vulnerability VCID-ffqg-mkqf-xqgh
25
vulnerability VCID-g9rk-me3p-1fey
26
vulnerability VCID-h11m-szkg-p7c5
27
vulnerability VCID-hdnj-g415-2bbw
28
vulnerability VCID-j4ut-s3e4-qqh7
29
vulnerability VCID-jz35-ynpa-sqfq
30
vulnerability VCID-kdhy-vpg2-nqgh
31
vulnerability VCID-kq3c-qp43-dqgg
32
vulnerability VCID-kxvn-6xbg-4fep
33
vulnerability VCID-mvgq-kb92-dqf8
34
vulnerability VCID-nafh-ss66-efc1
35
vulnerability VCID-p7x2-ejss-ffd1
36
vulnerability VCID-pmx1-hkph-4qhd
37
vulnerability VCID-rx6f-x5cc-6bef
38
vulnerability VCID-ryjx-b2fp-5bbc
39
vulnerability VCID-s6p4-xq69-6fb4
40
vulnerability VCID-twp1-3h1f-r3de
41
vulnerability VCID-wpew-vv5h-r7c5
42
vulnerability VCID-wtt7-38dy-gbec
43
vulnerability VCID-xdgh-k9su-4bes
44
vulnerability VCID-xym1-6dp5-t7d7
45
vulnerability VCID-y5je-ud4g-ufdc
46
vulnerability VCID-z1yq-nwk7-1kba
47
vulnerability VCID-z6g3-j67d-87hc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
9
url pkg:maven/org.apache.tomcat/tomcat@10.1.34
purl pkg:maven/org.apache.tomcat/tomcat@10.1.34
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.34
10
url pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
purl pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1maq-ar71-p3ha
1
vulnerability VCID-1mms-9rqw-xqhq
2
vulnerability VCID-35fm-apgj-jqd3
3
vulnerability VCID-3e3b-6dse-s3gf
4
vulnerability VCID-4qzp-up1c-2kfq
5
vulnerability VCID-5j78-np3z-rfda
6
vulnerability VCID-61p6-f9vu-7fca
7
vulnerability VCID-61xw-8vnm-vkcx
8
vulnerability VCID-64r1-zcg6-qfb8
9
vulnerability VCID-67rb-z7qk-zke9
10
vulnerability VCID-6t1m-v4ym-4uhs
11
vulnerability VCID-71uq-hgqp-b3a1
12
vulnerability VCID-8btx-vpre-pugb
13
vulnerability VCID-9248-b5q8-2bc7
14
vulnerability VCID-9ptv-guzs-kyg1
15
vulnerability VCID-9w58-wv96-dfhb
16
vulnerability VCID-b4g7-nvey-5bh3
17
vulnerability VCID-b9hb-uzqm-wbcp
18
vulnerability VCID-bqkn-zvm1-4kd6
19
vulnerability VCID-c8b5-23zz-cudd
20
vulnerability VCID-dk5d-3ebq-yfbn
21
vulnerability VCID-eehy-pgzv-vudx
22
vulnerability VCID-ek4k-3m72-qqbf
23
vulnerability VCID-ffqg-mkqf-xqgh
24
vulnerability VCID-g9rk-me3p-1fey
25
vulnerability VCID-h11m-szkg-p7c5
26
vulnerability VCID-hdnj-g415-2bbw
27
vulnerability VCID-jz35-ynpa-sqfq
28
vulnerability VCID-kdhy-vpg2-nqgh
29
vulnerability VCID-kq3c-qp43-dqgg
30
vulnerability VCID-kxvn-6xbg-4fep
31
vulnerability VCID-mvgq-kb92-dqf8
32
vulnerability VCID-nafh-ss66-efc1
33
vulnerability VCID-p7x2-ejss-ffd1
34
vulnerability VCID-pmx1-hkph-4qhd
35
vulnerability VCID-rx6f-x5cc-6bef
36
vulnerability VCID-ryjx-b2fp-5bbc
37
vulnerability VCID-s6p4-xq69-6fb4
38
vulnerability VCID-twp1-3h1f-r3de
39
vulnerability VCID-wpew-vv5h-r7c5
40
vulnerability VCID-xdgh-k9su-4bes
41
vulnerability VCID-y5je-ud4g-ufdc
42
vulnerability VCID-z1yq-nwk7-1kba
43
vulnerability VCID-z6g3-j67d-87hc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
11
url pkg:maven/org.apache.tomcat/tomcat@11.0.2
purl pkg:maven/org.apache.tomcat/tomcat@11.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.2
12
url pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1?arch=el7jws
purl pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1?arch=el7jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1%3Farch=el7jws
13
url pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1?arch=el8jws
purl pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1?arch=el8jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1%3Farch=el8jws
14
url pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1?arch=el9jws
purl pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1?arch=el9jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws5-tomcat@9.0.87-8.redhat_00008.1%3Farch=el9jws
15
url pkg:rpm/redhat/jws6-tomcat@10.1.36-6.redhat_00007.1?arch=el8jws
purl pkg:rpm/redhat/jws6-tomcat@10.1.36-6.redhat_00007.1?arch=el8jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
1
vulnerability VCID-nafh-ss66-efc1
2
vulnerability VCID-tpv3-1vbv-tbd9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws6-tomcat@10.1.36-6.redhat_00007.1%3Farch=el8jws
16
url pkg:rpm/redhat/jws6-tomcat@10.1.36-6.redhat_00007.1?arch=el9jws
purl pkg:rpm/redhat/jws6-tomcat@10.1.36-6.redhat_00007.1?arch=el9jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
1
vulnerability VCID-nafh-ss66-efc1
2
vulnerability VCID-tpv3-1vbv-tbd9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws6-tomcat@10.1.36-6.redhat_00007.1%3Farch=el9jws
17
url pkg:rpm/redhat/tomcat@1:10.1.36-1?arch=el10_0
purl pkg:rpm/redhat/tomcat@1:10.1.36-1?arch=el10_0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-61xw-8vnm-vkcx
1
vulnerability VCID-kq3c-qp43-dqgg
2
vulnerability VCID-nafh-ss66-efc1
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat@1:10.1.36-1%3Farch=el10_0
18
url pkg:rpm/redhat/tomcat@1:9.0.87-1.el8_10?arch=3
purl pkg:rpm/redhat/tomcat@1:9.0.87-1.el8_10?arch=3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
1
vulnerability VCID-wpew-vv5h-r7c5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat@1:9.0.87-1.el8_10%3Farch=3
19
url pkg:rpm/redhat/tomcat@1:9.0.87-1.el8_8?arch=4
purl pkg:rpm/redhat/tomcat@1:9.0.87-1.el8_8?arch=4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
1
vulnerability VCID-wpew-vv5h-r7c5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat@1:9.0.87-1.el8_8%3Farch=4
20
url pkg:rpm/redhat/tomcat@1:9.0.87-1.el9_2?arch=3
purl pkg:rpm/redhat/tomcat@1:9.0.87-1.el9_2?arch=3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
1
vulnerability VCID-wpew-vv5h-r7c5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat@1:9.0.87-1.el9_2%3Farch=3
21
url pkg:rpm/redhat/tomcat@1:9.0.87-1.el9_4?arch=3
purl pkg:rpm/redhat/tomcat@1:9.0.87-1.el9_4?arch=3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
1
vulnerability VCID-wpew-vv5h-r7c5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat@1:9.0.87-1.el9_4%3Farch=3
22
url pkg:rpm/redhat/tomcat@1:9.0.87-2.el9_5?arch=1
purl pkg:rpm/redhat/tomcat@1:9.0.87-2.el9_5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
1
vulnerability VCID-wpew-vv5h-r7c5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat@1:9.0.87-2.el9_5%3Farch=1
23
url pkg:rpm/redhat/tomcat9@1:9.0.87-5?arch=el10_0
purl pkg:rpm/redhat/tomcat9@1:9.0.87-5?arch=el10_0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kq3c-qp43-dqgg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat9@1:9.0.87-5%3Farch=el10_0
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-24813.json
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-24813.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24813
reference_id
reference_type
scores
0
value 0.9413
scoring_system epss
scoring_elements 0.99917
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24813
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/apache/tomcat/commit/0a668e0c27f2b7ca0cc7c6eea32253b9b5ecb29c
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/0a668e0c27f2b7ca0cc7c6eea32253b9b5ecb29c
4
reference_url https://github.com/apache/tomcat/commit/eb61aade8f8daccaecabf07d428b877975622f72
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/eb61aade8f8daccaecabf07d428b877975622f72
5
reference_url https://github.com/apache/tomcat/commit/f6c01d6577cf9a1e06792be47e623d36acc3b5dc
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/f6c01d6577cf9a1e06792be47e623d36acc3b5dc
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2351129
reference_id 2351129
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2351129
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24813
reference_id CVE-2025-24813
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24813
8
reference_url https://access.redhat.com/errata/RHSA-2025:3454
reference_id RHSA-2025:3454
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3454
9
reference_url https://access.redhat.com/errata/RHSA-2025:3455
reference_id RHSA-2025:3455
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3455
10
reference_url https://access.redhat.com/errata/RHSA-2025:3608
reference_id RHSA-2025:3608
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3608
11
reference_url https://access.redhat.com/errata/RHSA-2025:3609
reference_id RHSA-2025:3609
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3609
12
reference_url https://access.redhat.com/errata/RHSA-2025:3645
reference_id RHSA-2025:3645
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3645
13
reference_url https://access.redhat.com/errata/RHSA-2025:3646
reference_id RHSA-2025:3646
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3646
14
reference_url https://access.redhat.com/errata/RHSA-2025:3647
reference_id RHSA-2025:3647
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3647
15
reference_url https://access.redhat.com/errata/RHSA-2025:3683
reference_id RHSA-2025:3683
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3683
16
reference_url https://access.redhat.com/errata/RHSA-2025:3684
reference_id RHSA-2025:3684
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:3684
17
reference_url https://access.redhat.com/errata/RHSA-2025:7494
reference_id RHSA-2025:7494
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:7494
18
reference_url https://access.redhat.com/errata/RHSA-2025:7497
reference_id RHSA-2025:7497
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:7497
Weaknesses
0
cwe_id 41
name Improper Resolution of Path Equivalence
description The product is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object.
Exploits
0
date_added 2025-04-01
description Apache Tomcat contains a path equivalence vulnerability that allows a remote attacker to execute code, disclose information, or inject malicious content via a partial PUT request.
required_action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
due_date 2025-04-22
notes This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq ; https://nvd.nist.gov/vuln/detail/CVE-2025-24813
known_ransomware_campaign_use false
source_date_published null
exploit_type null
platform null
source_date_updated null
data_source KEV
source_url null
1
date_added null
description 
This module exploits a Java deserialization vulnerability in Apache
          Tomcat's session restoration functionality that can be exploited with a partial HTTP PUT request to
          place an attacker controlled deserialization payload in the <tomcat_root_dir>/webapps/ROOT/ directory.

          For the exploit to succeed, writes must be enabled for the default servlet,
          and org.apache.catalina.session.PersistentManager must be configured to use
          org.apache.catalina.session.FileStore.

          Verified working on 10.1.16-1
required_action null
due_date null
notes 
Stability:
  - crash-safe
Reliability:
  - repeatable-session
SideEffects:
  - ioc-in-logs
  - artifacts-on-disk
known_ransomware_campaign_use false
source_date_published 2025-03-10
exploit_type null
platform Linux,Unix,Windows
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/multi/http/tomcat_partial_put_deserialization.rb
Severity_range_score7.0 - 8.9
Exploitability2.0
Weighted_severity8.0
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kq3c-qp43-dqgg