CFADVISORY-CL-application-security-waf-waf-release-2025-04-02

Exploit Intelligence

• Dhananjayasj/CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE- (github-poc-repo)
• Dhananjayasj/CVE-2025-24813-Apache-Tomcat-Partial-PUT-Deserialization-RCE- (github-poc)
• ICT279 Vulnerability Detection and Mitigation Project using CVE-2025-24813 in an Internet Banking Environment (github-poc-repo)
• ICT279 Vulnerability Detection and Mitigation Project using CVE-2025-24813 in an Internet Banking Environment (github-poc)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc-repo)
• Unauthenticated Remote Code Execution via Angular-Base64-Upload Library (github-poc)
• suil12/CVE-2025-24813_presentation (github-poc)
• S2-061/S2-062 Struts2 远程命令执行漏洞 POC&EXP (github-poc-repo)
• Vulnerable environment of CVE-2021-31805 (S2-062) for testing (github-poc-repo)
• 远程代码执行S2-062 CVE-2021-31805验证POC (github-poc-repo)

…and 121 more exploits

Timeline

• Apr 2, 2025 CVE Published

References

• WAF - WAF Release - 2025-04-02 advisory