Debian/tomcat11: high 7.5
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root of the web application, it was possible
Action: Upgrade tomcat11 to 11.0.15-1~deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.0.15-1~deb13u1 | - |
Fixed versions
| 11.0.15-1~deb13u1 |
Sources
- osv: DEBIAN-CVE-2025-49125#Debian:13/tomcat11
- https://security-tracker.debian.org/tracker/CVE-2025-49125
published · modified · JSON