VDB
BIT-tomcat-2025-31650
BIT-tomcat-2025-31650
PUBLISHED
CVSS 7.5 HIGH
Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | tomcat | 9.0.76, 10.1.10, 11.0.0 |
Exploit Intelligence
- B1gN0Se/Tomcat-CVE-2025-31650 (github-poc)
- obscura-cert/CVE-2025-31650 (github-poc)
- CVE-2025-31650 (github-poc)
- CVE-2025-31650 (github-poc)
- sattarbug/Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool (github-poc)
- CVE-2025-31650 PoC (github-poc)
- A tool designed to detect the vulnerability **CVE-2025-31650** in Apache Tomcat (versions 10.1.10 to 10.1.39) (github-poc)
Timeline
- Apr 30, 2025 CVE Published
- Mar 20, 2026 CVE Updated