CVE-2025-55752

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.10 Apache Tomcat versions 10.1.0-M1 through 10.1.44 Apache Tomcat versions 9.0.0.M11 through 9.0.108 Apache Tomcat versions 8.5.6 through 8.5.100

Description A relative path traversal issue exists due to a regression where rewritten URLs are normalized before being decoded. This allows an attacker to manipulate the request URI to bypass security constraints, granting unauthorized access to protected directories such as '/WEB-INF/' and '/META-INF/'. If the PUT method is enabled, this could allow the upload of malicious files, potentially leading to remote code execution. This issue specifically occurs when rewrite rules are used to rewrite query parameters to the URL, often involving the RewriteValve component.

Recommendations Upgrade to version 11.0.11 or later. Upgrade to version 10.1.45 or later. Upgrade to version 9.0.109 or later. Disable RewriteValve entries in server.xml or context.xml where not strictly required. Disable the PUT method to prevent potential remote code execution.