Threats tagged 'bit-tomcat-2025-31651'

Apache Tomcat contains a vulnerability in its Rewrite Valve that allows bypassing certain rewrite rules under specific, unlikely configurations. This flaw could enable attackers to circumvent security constraints enforced by these rules. The issue affects multiple Tomcat versions including 8.5.x, 9.0.x, 10.1.x, and 11.0.x series. A patch is available and users are advised to upgrade to fixed versions to mitigate the risk.