Two security vulnerabilities in Apache Tomcat 9 are addressed in this Red Hat advisory RHSA-2025:23053 for Red Hat Enterprise Linux 10.0 Extended Update Support. CVE-2025-31651 is a bypass of rules in the Rewrite Valve, and CVE-2025-55752 is a directory traversal vulnerability via rewrite that could potentially allow remote code execution. The advisory provides updated tomcat9 packages (version 9.0.87-5.el10_0.4) that fix these issues. The vulnerabilities relate to CWE-150 (Improper Neutralization of Input During Web Page Generation) and CWE-23 (Relative Path Traversal). No CVSS scores are provided in the advisory, but Red Hat rates the update as Important. The advisory includes detailed package information and references for applying the update.

Successful exploitation of CVE-2025-31651 could allow bypassing of rewrite rules in Tomcat's Rewrite Valve, potentially altering request handling. CVE-2025-55752 could allow directory traversal through rewrite rules, which may lead to remote code execution. These vulnerabilities could compromise the confidentiality, integrity, and availability of affected systems running vulnerable Tomcat versions. The severity is assessed as high by the source data, and Red Hat rates the update as Important.

Red Hat has released updated tomcat9 packages for Red Hat Enterprise Linux 10.0 Extended Update Support that address these vulnerabilities. Users should apply the update as described in Red Hat advisory RHSA-2025:23053 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. Since this is an on-premises product, remediation requires applying the vendor-provided package updates. Patch status is confirmed by the vendor advisory.