Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

CVE-2024-50379

githubexploit · 2026-06-20

Description

Exploit description for a Time of check Time of use race condition affecting Apache Tomcat.

Entry point

Parametershell.jsp · path

Path/uploads/shell.jsp

JSP shell uploaded via vulnerable file upload to /uploads enabling remote command execution.

Affected Apache Tomcat versions

Apache Tomcat< 9.0.98, 10.1.34, 11.0.2

All known vulnerabilities by product

Alt Linux Almalinux Apache Tomcat Astra Linux Centos Confluence Linuxmint Red Hat

CVSS 9.8 for CVE-2024-50379

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

44.3%higher than 98.6% of all CVEs

Updated 2026-07-13

Exploit Details

Modified:2026-06-20 18:22

Last Seen:2026-06-20 18:22

Reporter:azilRababe

Last commit:2026-06-20

Other exploits for CVE-2024-50379

Exploit for CVE-2025-55752

2025-10-29 masahiro331GITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

2025-03-30 thunwwGITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

2025-01-23 pwnosecGITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

2024-12-25 dragonked2GITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

2024-12-23 SleepingBag945GITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

2024-12-23 dear-cellGITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

2024-12-21 ph0ebusGITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

2024-12-20 JFOZ1010GITHUB

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=B59AFB79-5EFF-5CBE-9EBA-41DE2D90DCE9
No description provided

Exploit Code

Share

Share on social media: