Exploit for Deserialization of Untrusted Data in Apache Tomcat

githubexploit · 2025-03-14

Description

Remote proof of concept for CVE-2025-24813 using dnslog to detect exploit results.

Affected Apache Tomcat versions

Apache Tomcat< 9.0.99, 10.1.35, 11.0.3, 10.1.0, 11.0.0

All known vulnerabilities by product

Alt Linux Almalinux Apache Tomcat Astra Linux Centos Debian Linuxmint Red Hat

CVSS 9.8 for CVE-2025-24813

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

99%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-08-18

Exploit Details

Modified:2025-03-27 23:21

Last Seen:2025-08-31 22:30

Reporter:N0c1or

Written in:Python

Last commit:2025-03-15

Tags

CVE-2025-24813remote proof of conceptdnslog detectioneducational use only

Other exploits for CVE-2025-24813

CVE-2025-24813-PoC

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

Tomcat-CVE_2025_24813

2026-08-28 KitPloitKITPLOIT

CVE-2025-24813_presentation

2026-08-28 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

CVE-2025-24813-POC

2026-08-27 KitPloitKITPLOIT

Exploit Code

README8 lines

## https://sploitus.com/exploit?id=063719FE-D232-5358-A637-0ED33A59794F
# CVE-2025-24813_POC
CVE-2025-24813_POC

A remote detection POC; using dnslog to determine the results of exploitation.


# For educational purposes only, do not use for illegal purposes.