{"uuid": "952a2892-2c60-44fc-801b-6f73e79ef374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24813", "type": "seen", "source": "https://t.me/hackeronereports/215", "content": "\ud83c\udfaf New Report #3031518: CVE-2025-24813: Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: sw0rd1ight\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: 4323\n\ud83d\udd50 Submitted: 2025-03-11\n\u23f0 Disclosed: 2025-04-27 14:53:24\n\ud83d\udcdd Summary: The Apache Tomcat vulnerability CVE-2025-24813 allowed remote code execution and information disclosure. The vulnerability was caused by a combination of features, including writes enabled for the default servlet, support for partial PUT requests, and the use of Tomcat's file-based session persistence with the default storage location. If these conditions were met, a malicious user could have taken advantage of the vulnerability.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.028097Z"}