¡¾·ì϶¹«¸æ¡¿Apache Tomcat°²È«Ô¼ÊøÈƹý·ì϶ (CVE-2025-49125)
°ä²¼¹¦·ò 2025-06-17Ò»¡¢¡¢·ì϶¸ÅÊö
·ì϶Ãû³Æ | Apache Tomcat°²È«Ô¼ÊøÈƹý·ì϶ | ||
CVE ID | CVE-2025-49125 | ||
·ì϶ÀàÐÍ | ½Ó¼û½ÚÖÆ·ì϶ | ·¢ÏÖ¹¦·ò | 2025-06-17 |
·ì϶ÆÀ·Ö | ÔÝÎÞ | ·ì϶µÈ¼¶ | ¸ßΣ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | ÎÞ |
ÀûÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»±ØÒª |
PoC/EXP | Òѹ«¿ª | ÔÚÒ°ÀûÓà | δ·¢ÏÖ |
Apache TomcatÊÇÒ»¸ö¿ªÔ´µÄJava ServletÈÝÆ÷ºÍWeb·þÎñÆ÷£¬£¬£¬ÖØÒªÓÃÓÚÔËÐÐJavaÀûÓ÷¨Ê½£¬£¬£¬³ö¸ñÊÇ»ùÓÚServletºÍ"text-wrap-mode: wrap;">? ¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÖÆ£¬£¬£¬Åú¸Ä·À»ðǽսÊõ£¬£¬£¬¹Ø±Õ·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£


¾©¹«Íø°²±¸11010802024551ºÅ