Apache Tomcat Path Traversal Vulnerability (CVE-2025-55752) Notice

Apache Tomcat Path Traversal Vulnerability (CVE-2025-55752) Notice

Overview Recently, NSFOCUS CERT detected that Apache issued a security bulletin to fix the Apache Tomcat path traversal vulnerability (CVE-2025-55752); This vulnerability is a flaw introduced when fixing CVE-2016-5388. Since the rewritten ...

Apache Kafka Arbitrary File Read and SSRF Vulnerability (CVE-2025-27817)

Overview Recently, NSFOCUS CERT detected that Apache issued a security bulletin to fix the arbitrary file read and SSRF vulnerabilities in Apache Kafka (CVE-2025-27817); Because the Apache Kafka client does not strictly ...

Disposal Advisory for Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813)

Vulnerability Overview Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813) NSFOCUS Detection Methods NSFOCUS Remote Security Assessment System (RSAS), Web Vulnerability Scanning System (WVSS) and Network Intrusion Detection System (IDS) have the ability ...
Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813)

Apache Tomcat Remote Code Execution Vulnerability (CVE-2025-24813)

Overview Recently, NSFOCUS CERT detected that Apache issued a security announcement and fixed the remote code execution vulnerability of Apache Tomcat (CVE-2025-24813). An unauthenticated attacker can execute arbitrary code to gain server ...