Debian/tomcat10: high 7.5
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root of the web application, it was possible
Action: Upgrade tomcat10 to 10.1.52-1~deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.1.52-1~deb13u1 | - |
Fixed versions
| 10.1.52-1~deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-49125#Debian:13/tomcat10
- https://security-tracker.debian.org/tracker/CVE-2025-49125
published · modified · JSON