CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

[UPDATE] [high] Apache Tomcat: Vulnerability enables manipulation of files

high
A remote, anonymous attacker can exploit a vulnerability in Apache Tomcat to manipulate files.

CSIRTS triage

vendor: Apacheproduct: TomcatPath traversal
What
A vulnerability in Apache Tomcat enables remote attackers to manipulate files.
Who is affected
Apache Tomcat deployments running affected versions.
Urgency
High severity file manipulation vulnerability requires prompt remediation to prevent data integrity compromise.
Action
Apply Apache Tomcat security updates addressing the file manipulation vulnerability.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Tomcat

Get an email when a new Tomcat advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
high
Published
2026-08-03
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0460

Recent advisories for Apache Tomcat

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

More from CERT-Bund (BSI) Security Advisories