Main
Vulnerability Database
Exploits
ID:12061 - Exploit for Path traversal in Apache Tomcat - CVE-2025-55752
ID:12061 - Exploit for Path traversal in Apache Tomcat - CVE-2025-55752
Published: October 31, 2025
Vulnerability identifier: #VU117681
Vulnerability risk: High
CVE-ID: CVE-2025-55752
CWE-ID: CWE-22
Exploitation vector: Remote access
Vulnerable software:
Apache Tomcat
Apache Tomcat
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to input validation error when processing directory traversal sequences passed via Rewrite Valve. A remote attacker can send a specially crafted HTTP PUT request and write arbitrary files to the server, leading to remote code execution.
Remediation
Install updates from vendor's website.