Sploitus

Exploit for Deserialization of Untrusted Data in Apache Tomcat

CVE-2025-24813

githubexploit · 2025-03-14

Exploit Code

README19 lines
## https://sploitus.com/exploit?id=545A3FE0-1771-5B6B-BA04-9AAA2669B884
# cve-2025-24813_poc

**cve-2025-24813 Verification Script**

## Affected Versions
- 9.0.0.M1 <= Tomcat <= 9.0.98
- 10.1.0-M1 <= Tomcat <= 10.1.34
- 11.0.0-M1 <= Tomcat <= 11.0.2

## Detection Method
```shell
python .\CVE-2025-24813-poc.py -u {url}
```

![Image](https://github.com/user-attachments/assets/da5beba4-acbe-4f67-badd-16f7af46dff9)

## Disclaimer
This script is intended for legitimate security research and educational purposes only. Unauthorized attacks, intrusions, or interference are strictly prohibited without explicit consent from the system owner. Users must comply with all applicable laws and regulations, especially those related to privacy, system security, and network security when using this tool. – This tool is provided by the developer for security research and educational purposes only. – The developer assumes no responsibility for any illegal actions, data loss, system damage, or other consequences resulting from the use of this tool. – The developer does not guarantee the completeness, accuracy, or availability of this tool, and users must bear their own risks.