CVE-2024-50379— Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
Quick assessment
Affected
Apache Software Foundation Apache Tomcat
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。用于实现对Servlet和JavaServer Page（JSP）的支持。 Apache Tomcat存在安全漏洞。攻击者利用该漏洞可以在不区分大小写的文件系统上远程执行代码。以下版本受到影响：11.0.0-M1版本和11.0.1版本、10.1.0-M1版本至10.1.33版本和9.0.0.M1版本至9.0.97版本。
Possible ATT&CK Techniques 3 AI
T1190 · Exploit Public-Facing Application T1203 · Exploitation for Client Execution T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-50379
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
Source: CVE Program / CVE List V5
Vulnerability Description
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration).
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97.
The following versions were EOL at the time the CVE was created but are
known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected.
Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Source: CVE Program / CVE List V5
Vulnerability Title
Apache Tomcat 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。用于实现对Servlet和JavaServer Page（JSP）的支持。 Apache Tomcat存在安全漏洞。攻击者利用该漏洞可以在不区分大小写的文件系统上远程执行代码。以下版本受到影响：11.0.0-M1版本和11.0.1版本、10.1.0-M1版本至10.1.33版本和9.0.0.M1版本至9.0.97版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Tomcat | 11.0.0-M1 ~ 11.0.1 | - |
|
II. Public POCs for CVE-2024-50379
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/v3153/CVE-2024-50379-POC | POC Details |
| 2 | None | https://github.com/yiliufeng168/CVE-2024-50379-POC | POC Details |
| 3 | Repositorio para alojar un template de Nuclei para probar el CVE-2024-50379 (en fase de prueba) | https://github.com/JFOZ1010/Nuclei-Template-CVE-2024-50379 | POC Details |
| 4 | Apache Tomcat（CVE-2024-50379）条件竞争致远程代码执行漏洞批量检测脚本 | https://github.com/iSee857/CVE-2024-50379-PoC | POC Details |
| 5 | CVE-2024-50379 is a critical vulnerability affecting multiple versions of Apache Tomcat, an open source web server and servlet container widely used for deploying Java-based web applications. The vulnerability arises from a Time-of-Use (TOCTOU) race condition that occurs when compiling JavaServer Pages (JSPs). | https://github.com/Alchemist3dot14/CVE-2024-50379 | POC Details |
| 6 | RCE through a race condition in Apache Tomcat | https://github.com/ph0ebus/Tomcat-CVE-2024-50379-Poc | POC Details |
| 7 | tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp | https://github.com/SleepingBag945/CVE-2024-50379 | POC Details |
| 8 | CVE-2024-50379利用 | https://github.com/dear-cell/CVE-2024-50379 | POC Details |
| 9 | CVE-2024-50379-exp | https://github.com/lizhianyuguangming/CVE-2024-50379-exp | POC Details |
| 10 | This repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either unprotected or not present on the target server. | https://github.com/dragonked2/CVE-2024-50379-POC | POC Details |
| 11 | Testing the latset Apache Tomcat CVE-2024-50379 Vuln | https://github.com/bigb0x/CVE-2024-50379 | POC Details |
| 12 | ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is especially effective when the /uploads directory is either unprotected or missing on the target server. | https://github.com/pwnosec/CVE-2024-50379 | POC Details |
| 13 | Testing the latset Apache Tomcat CVE-2024-50379 Vuln | https://github.com/dkstar11q/CVE-2024-50379-nuclei | POC Details |
| 14 | tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp | https://github.com/paltrybelly/CVE-2024-50379 | POC Details |
| 15 | tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp | https://github.com/shoddykilom/CVE-2024-50379 | POC Details |
| 16 | tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp | https://github.com/unkemptpanc/CVE-2024-50379 | POC Details |
| 17 | tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp | https://github.com/whimsicalsubw/CVE-2024-50379 | POC Details |
| 18 | tomcat CVE-2024-50379/CVE-2024-56337 条件竞争文件上传exp | https://github.com/carefreegarb/CVE-2024-50379 | POC Details |
| 19 | None | https://github.com/thunww/CVE-2024-50379 | POC Details |
| 20 | CVE-2024-50379-exp | https://github.com/gomtaengi/CVE-2024-50379-exp | POC Details |
| 21 | Cve exploiting | https://github.com/Yuri08loveElaina/CVE-2024-50379-POC | POC Details |
| 22 | None | https://github.com/Yuri08loveElaina/CVE-2024-50379 | POC Details |
| 23 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability | https://github.com/radzek15/CVE-2024-50379-TOCTOU | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-50379
请登录查看更多情报信息。
Mailing List Discussions for CVE-2024-50379 (1)
IV. Related Vulnerabilities
Same product: Apache Tomcat
-
CVE-2026-87022
Apache Tomcat: WebSocket message smuggling with per-message- -
CVE-2026-86350
Apache Tomcat: Regression in fix for CVE-2026-41293 can trig -
CVE-2026-86248
Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP c -
CVE-2026-79677
Apache Tomcat: WebSocket DoS due to lost asynchronous write -
CVE-2026-78437
Apache Tomcat: HTTP/2 DoS via malformed request
Same vendor: Apache Software Foundation
-
CVE-2026-92415
Apache Jackrabbit: DavEx client runs Class.forName + (String -
CVE-2026-92414
Apache Jackrabbit: Pre-auth hijack of cached sessions via de -
CVE-2026-97146
Apache YuniKorn: Admission control bypass via system label f -
CVE-2026-78243
Apache YuniKorn: LDAP Group provider panics on lowercase att -
CVE-2026-92393
Apache YuniKorn: Admission control bypass via workload UPDAT
Same weakness: CWE-367
-
CVE-2026-106451
yawkat LZ4 Java: Native library extraction to a shared tempo -
CVE-2026-89430
Gitea push mirror SSRF and forced writes to internal Git hos -
CVE-2026-106413
Chrome<155.0.8059.39竞态条件漏洞 -
CVE-2026-106207
Chrome <155.0.8059.39 V8竞态条件漏洞致远程代码执行 -
CVE-2026-106405
Chrome Android < 155.0.8059.39竞态条件漏洞
V. Comments for CVE-2024-50379
No comments yet