Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
CVE-2025-46701
Good to know:
Date: May 29, 2025
Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1 through 10.1.40, from 9.0.0.M1 through 9.0.104. Users are recommended to upgrade to version 11.0.7, 10.1.41 or 9.0.105, which fixes the issue.
Severity Score
Related Resources (15)
Severity Score
Weakness Type (CWE)
Improper Handling of Case Sensitivity
CWE-178Top Fix
Upgrade Version
Upgrade to version org.apache.tomcat:tomcat-catalina:11.0.7;org.apache.tomcat:tomcat-catalina:10.1.41;org.apache.tomcat:tomcat-catalina:9.0.105;org.apache.tomcat.embed:tomcat-embed-core:11.0.7;org.apache.tomcat.embed:tomcat-embed-core:10.1.41;org.apache.tomcat.embed:tomcat-embed-core:9.0.105;org.apache.tomcat:tomcat-catalina:9.0.105;org.apache.tomcat:tomcat-catalina:10.1.41;org.apache.tomcat:tomcat-catalina:11.0.7;org.apache.tomcat.embed:tomcat-embed-core:9.0.105;org.apache.tomcat.embed:tomcat-embed-core:10.1.41;org.apache.tomcat.embed:tomcat-embed-core:11.0.7;https://github.com/apache/tomcat.git - 11.0.7;https://github.com/apache/tomcat.git - 10.1.41;https://github.com/apache/tomcat.git - 9.0.105
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | NONE |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | LOW |
| Integrity (I): | LOW |
| Availability (A): | NONE |