CVE-2024-54677
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Dec 17, 2024
Updated: Dec 18, 2024
CWE ID 400
Summary
CVE-2024-54677 is an Uncontrolled Resource Consumption vulnerability that affects various versions of Apache Tomcat, including 11.0.0-M1 to 11.0.1, 10.1.0-M1 to 10.1.33, and 9.0.0.M1 to 9.9.97. This issue allows an attacker to cause a denial of service by overwhelming the application with excessive resource usage. Users are strongly urged to upgrade to Apache Tomcat versions 11.0.2, 10.1.34, or 9.0.98 to mitigate this vulnerability and prevent potential disruptions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Apache Tomcat
Affected Vendors
- Apache Corporation