Apache Tomcat security advisory (AV25-127)

Serial number: AV25-127
Date: March 11, 2025

On March 10, 2025, Apache published a security advisory to address a vulnerability in the following products:

• Apache Tomcat – versions 11.0.0-M1 to 11.0.2
• Apache Tomcat – versions 10.1.0-M1 to 10.1.34
• Apache Tomcat – versions 9.0.0.M1 to 9.0.98

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Apache Security Advisory - [SECURITY] CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT