CVE-2025-48989

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 11.0.0-M1 through 11.0.9 Apache Tomcat versions 10.1.0-M1 through 10.1.43 Apache Tomcat versions 9.0.0.M1 through 9.0.107

Description: A flaw in resource shutdown or release within Apache Tomcat creates a vulnerability to the “Made You Reset” attack. Older, end-of-life versions may also be affected.

Recommendations: Upgrade to Apache Tomcat version 11.0.10. Upgrade to Apache Tomcat version 10.1.44. Upgrade to Apache Tomcat version 9.0.108.