{"uuid": "0eec17a4-1139-439d-b2a2-793f598a1e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24813", "type": "seen", "source": "https://t.me/hackeronereports/215", "content": "\ud83c\udfaf New Report #3031518: CVE-2025-24813: Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: sw0rd1ight\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: 4323\n\ud83d\udd50 Submitted: 2025-03-11\n\u23f0 Disclosed: 2025-04-27 14:53:24\n\ud83d\udcdd Summary: The Apache Tomcat vulnerability CVE-2025-24813 allowed remote code execution and information disclosure. The vulnerability was caused by a combination of features, including writes enabled for the default servlet, support for partial PUT requests, and the use of Tomcat's file-based session persistence with the default storage location. If these conditions were met, a malicious user could have taken advantage of the vulnerability.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.634582Z"}