BIT-tomcat-2024-50379 — Vulnetix

BIT-tomcat-2024-50379 PUBLISHED CVSS 9.800000190734863 CRITICAL

Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

Risk Scores

CVSS 3.1

9.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Bitnami	tomcat	9.0.0, 10.0.0, 11.0.0

Exploit Intelligence

Technical analysis of Apache Tomcat CVE-2024-50379, covering root cause, exploitation conditions, detection strategies, and mitigation techniques. (github-poc-repo)
Technical analysis of Apache Tomcat CVE-2024-50379, covering root cause, exploitation conditions, detection strategies, and mitigation techniques. (github-poc)
Apache Tomcat（CVE-2024-50379）条件竞争致远程代码执行漏洞批量检测脚本 (github-poc-repo)
thunww/CVE-2024-50379 (github-poc-repo)
thunww/CVE-2024-50379 (github-poc)
ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is especially effective when the /uploads directory is either unprotected or missing on the target server. (github-poc)
CVE-2024-50379-exp (github-poc)
Testing the latset Apache Tomcat CVE-2024-50379 Vuln (github-poc)
This repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either unprotected or not present on the target server. (github-poc)
CVE-2024-50379利用 (github-poc)

…and 11 more exploits

Timeline

Jul 10, 2025 CVE Published
Mar 20, 2026 CVE Updated

References

Open in Interactive Console →

$ Console Community · 100/wk Open console ›