Apache has released a security update to address an important vulnerability in Tomcat web server that could lead to an attacker achieving remote code execution.

The exploiter then attempts to access the script to verify that the server was successfully ... using the new Action File Upload mechanism and related interceptor," warns Apache.

Apache releases a security update for CVE-2024-56337, addressing RCE risks in Tomcat servers with critical configuration changes required for Java 8, ...

An Apache Tomcat web server vulnerability has been published, exposing the platform to remote code execution through a race condition failure.