Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 3 products
| Date | Total | Labels |
|---|
| 2026-03-09 | 1 | General1 |
| 2026-03-13 | 1 | PoC1 |
| 2026-06-29 | 1 | General1 |
Completed the Tomcat: CVE-2024-50379 room on TryHackMe Sometimes the bug isn’t the code… It’s when the code runs 🏃 https://t.co/FpqFRdxHrG
Post summary
The tweet announces completion of a TryHackMe training room about CVE-2024-50379, with no additional technical or exploit details provided.
"Deep Dive & POC of CVE-2024-50379 Exploit Tomcat Vulnerability (9.8 Severity)" by Vidhi patel #BugBounty #Cybersecurity #Hacking #InfoSec https://infosecwriteups.com/deep-dive-poc-of-cve-2024-50379-exploit-tomcat-vulnerability-9-8-severity-776cfcfcf3ed
Post summary
The post announces a deep dive with a proof‑of‑concept for CVE‑2024‑50379, a Tomcat vulnerability rated 9.8 severity, suggesting detailed exploitation steps are provided in the linked article.
I just completed Tomcat: CVE-2024-50379 room on TryHackMe! Explore and learn about the Tomcat CVE-2024-50379 vulnerability. https://tryhackme.com/room/tomcatcve202450379?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=662fb6411f3680a87baf9e1f #tryhackme via @tryhackme
Post summary
The post announces completion of a TryHackMe training module focused on CVE‑2024‑50379, with no technical exploitation details or mitigation information provided.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | tomcat | - | - | - |
| OS | netapp | bootstrap_os | - | - | - |
| HW | netapp | hci_compute_node | - | - | - |