Exploit for #VU101814 Permissions, Privileges, and Access Controls in Apache Tomcat

Vulnerability identifier: #VU101814

Vulnerability risk: Medium

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2024-50379

CWE-ID: CWE-264

Exploitation vector: Network

Exploits in database: 11

• March 25, 2025
  • CVE-2024-50379 [Github]
• March 14, 2025
  • tomcat_cve_2024_50379_exploit () [Github]
• January 23, 2025
  • CVE-2024-50379 (ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is especially effective when the /uploads directory is either unprotected or missing on [Github]
• January 3, 2025
  • CVE-2024-50379-exp [Github]
• December 27, 2024
  • CVE-2024-50379-POC [Github]
  • Tomcat-CVE-2024-50379-Poc [Github]
  • CVE-2024-50379-PoC [Github]
  • CVE-2024-50379 [Github]
  • Nuclei-Template-CVE-2024-50379 [Github]
  • CVE-2024-50379-POC (This repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly usefu [Github]
• December 19, 2024
  • CVE-2024-50379-POC [Github]

Vulnerable software:
Apache Tomcat
Server applications / Web servers

Vendor: Apache Foundation