Debian/tomcat9: high 7.5
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root of the web application, it was possible
Action: Upgrade tomcat9 to 9.0.70-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.0.70-2 | - |
Fixed versions
| 9.0.70-2 |
Sources
- osv: DEBIAN-CVE-2025-49125#Debian:12/tomcat9
- https://security-tracker.debian.org/tracker/CVE-2025-49125
published · modified · JSON