admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-06-20 09:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update GobyVuls-Document.md

Browse Source
This commit is contained in:
Goby 2025-03-12 20:09:30 +08:00 committed by GitHub
parent 090a9c25b0
commit 53b93aa959
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
GobyVuls-Document.md
View File

@ -1,6 +1,21 @@
# Goby History Update Vulnerability Total Document (Continuously Update)
The following content is an updated vulnerability from Goby. Some of the vulnerabilities are recorded on the screen for easy viewing.
**Updated document date: March 12, 2025**
## Apache Tomcat Remote Command Execution Vulnerability (CVE-2025-24813)
| **Vulnerability** | Apache Tomcat Remote Command Execution Vulnerability (CVE-2025-24813)|
| :----: | :-----|
| **Chinese name** | Apache Tomcat 远程命令执行(CVE-2025-24813) |
| **CVSS core** | 6.40 |
| **FOFA Query** (click to view the results directly)| [app="APACHE-Tomcat"]
| **Number of assets affected** | 2.3W+ |
| **Description** |Apache Tomcat is an open-source Java Servlet container widely used for running Java-based web applications. This vulnerability (CVE-2025-24813) allows remote attackers to execute arbitrary commands on the target system via specially crafted malicious requests, potentially leading to full control of the affected server.|
| **Impact** | Attackers can exploit this vulnerability to execute arbitrary commands on the target server, leading to sensitive data leakage, full system compromise, and potential use in further attacks.
| **Affected versions** | 11.0.0-M1 ≤ Apache Tomcat ≤ 11.0.2 10.1.0-M1 ≤ Apache Tomcat ≤ 10.1.34 9.0.0.M1 ≤ Apache Tomcat ≤ 9.0.98
![](https://s3.bmp.ovh/imgs/2025/03/12/fb6c2a77c160d7e7.gif)
**Updated document date: March 03, 2025**
## Ollama /api/tags Unauthorized Access Vulnerability (CNVD-2025-04094)