Apache Tomcat security advisory (AV25-127)

Serial number: AV25-127
Date: March 11, 2025

On March 10, 2025, Apache published a security advisory to address a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following products:

• Apache Tomcat – versions 11.0.0-M1 to 11.0.2
• Apache Tomcat – versions 10.1.0-M1 to 10.1.34
• Apache Tomcat – versions 9.0.0.M1 to 9.0.98

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• Apache Security Advisory - [SECURITY] CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT