CVE-2025-48989
2 advisories.
Maven/org.apache.tomcat:tomcat-coyote CVE-2025-48989: high 7.5
Apache Tomcat Improper Resource Shutdown or Release vulnerability
Action: Upgrade org.apache.tomcat:tomcat-coyote to 9.0.108 (9.x), 10.1.44 (10.x) or 11.0.10 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0.0-M1 | 11.0.10 | - |
| 10.1.0-M1 | 10.1.44 | - |
| 9.0.0.M1 | 9.0.108 | - |
Fixed versions
| 11.0.10 | 10.1.44 | 9.0.108 |
Sources
- osv: GHSA-gqp3-2cvr-x8m3
- https://nvd.nist.gov/vuln/detail/CVE-2025-48989
- https://github.com/apache/tomcat/commit/73c04a10395774bda71a0b37802cf983662ce255
- https://github.com/apache/tomcat/commit/f362c8eb3b8ec5b7f312f7f5610731c0fb299a06
- https://github.com/apache/tomcat/commit/f36b8a4eea4ce8a0bc035079e1d259d29f5eb7bf
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/9ydfg0xr0tchmglcprhxgwhj0hfwxlyf
- https://tomcat.apache.org/security-10.html
- https://tomcat.apache.org/security-11.html
- https://tomcat.apache.org/security-9.html
- https://www.kb.cert.org/vuls/id/767506
- http://www.openwall.com/lists/oss-security/2025/08/13/2
CVE-2025-48989 · published · modified · JSON
Maven/org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48989: high 7.5
Apache Tomcat Improper Resource Shutdown or Release vulnerability
Action: Upgrade org.apache.tomcat.embed:tomcat-embed-core to 9.0.108 (9.x), 10.1.44 (10.x) or 11.0.10 (11.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0.0-M1 | 11.0.10 | - |
| 10.1.0-M1 | 10.1.44 | - |
| 9.0.0.M1 | 9.0.108 | - |
Fixed versions
| 11.0.10 | 10.1.44 | 9.0.108 |
Sources
- osv: GHSA-gqp3-2cvr-x8m3#Maven/org.apache.tomcat.embed:tomcat-embed-core
- https://nvd.nist.gov/vuln/detail/CVE-2025-48989
- https://github.com/apache/tomcat/commit/73c04a10395774bda71a0b37802cf983662ce255
- https://github.com/apache/tomcat/commit/f362c8eb3b8ec5b7f312f7f5610731c0fb299a06
- https://github.com/apache/tomcat/commit/f36b8a4eea4ce8a0bc035079e1d259d29f5eb7bf
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/9ydfg0xr0tchmglcprhxgwhj0hfwxlyf
- https://tomcat.apache.org/security-10.html
- https://tomcat.apache.org/security-11.html
- https://tomcat.apache.org/security-9.html
- https://www.kb.cert.org/vuls/id/767506
- http://www.openwall.com/lists/oss-security/2025/08/13/2
CVE-2025-48989 · published · modified · JSON