Apache Tomcat Rewrite Rule Bypass Vulnerability (Apr 2025) - Windows

<!DOCTYPE html>

<html lang="en">
  <head>
    <meta charset="utf-8">
    <base href="../">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=420, initial-scale=1">
    
    
    
    <title></title>

    
    
    <link href="css/bootstrap.min.css" rel="stylesheet" media="all">
    <link href="css/scaffolding.css?revision=952d7f7" rel="stylesheet" media="all">
    <link href="css/modal.css" rel="stylesheet" media="all">
    <link href="css/spinner.css" rel="stylesheet" media="all">
    <link rel="alternate" href="/api/static.lua"/>
    <link rel="stylesheet" href="css/hack.css">

    
    
    
  </head>
  
  <body onload="parse_permalink();">
    <header class="navbar navbar-default" style="margin-bottom: 0px; background: linear-gradient(to bottom, rgba(229,229,229,1) 0%,rgba(191,191,191,1) 100%);">
    <div class="container-fluid">
      
      <div class="navbar-header">
      <a class="navbar" href="./"><span><img src="images/logo.png" alt="Foal logo" style="margin-top: -10px !important;" height="30"/></a> &nbsp;
      </div>


      
      <div id="preferences">
        <ul class="nav" id="preferences_ul">
          <li class="dropdown navbar-right">
            <a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false">
              <img src="images/cog.png" alt="Display Settings" style="width: 32px;" title="Display Settings"/>
              <span class="caret"></span>
            </a>
            <div class="dropdown-menu" id="display_options_dropdown">

              <div style="width: 95%; display: inline-block; float: right; border-radius: 5px; border: 1px solid #3339; margin: 1%; padding: 1%;">
                <b>Email display mode:</b><hr/>
                <input type="radio" id="email_mode_chatty" name="ui_emailmode" value="chatty" onchange="set_skin_permalink(true);"> <label for="email_mode_chatty">Modern rendering</label><br/>
                <input type="radio" id="email_mode_plain" name="ui_emailmode" value="plain" onchange="set_skin_permalink(false);"> <label for="email_mode_plain">Legacy rendering</label><br/>

              </div>

            </div>
          </li>

          <li class="dropdown navbar-right" id="login">
            <a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true" aria-expanded="false"><img id="uimg" src="images/user_loggedout.png" alt="Logged out" style="width: 32px;"  title="Not logged in"/>
              <span class="caret"></span></a>
            <ul class="dropdown-menu" id="login_dropdown">
            </ul>
          </li>
        </ul>
      </div>
    
    </div>
    
    </header>
    
    <div class="container-fluid">
       <noscript>
          <div class="bs-callout bs-callout-alert">
            This site requires JavaScript enabled. Please enable it.
          </div>
      </noscript>
      <div class="row">
      
        <div id="emails">
          
        </div>
      </div>
    </div>
    <script src="js/jquery-1.12.4.min.js" integrity="sha256-ZosEbRLbNQzLpnKIkEdrPv7lOy9C27hHQ+Xp8a4MxAQ="></script>
    
    <script src="js/bootstrap.min.js"></script>
    <script src="js/config.js?revision=f51d5f8"></script>
    <script src="js/wordcloud.js?revision=f51d5f8"></script>
    <script src="js/ponymail.js?revision=f51d5f8"></script>
    <script src="js/mato.js"></script>
    <div id="splash" class="splash fade-in"> &nbsp; </div>
    <div style="clear: both;"></div>
  </body>
</html>

Apache Tomcat is prone to a rewrite rule bypass vulnerability.

CyStack Intelligent Products

CyStack VulnScan

Locker Secrets Manager

SafeChain Blockchain Security

Locker Password Manager

CyStack Endpoint

WhiteHub Bug Bounty

CyStack Trust Center

CyStack Data Leak Detection

By Use Case

By Industry

Looking for something?

Apache Tomcat Rewrite Rule Bypass Vulnerability (Apr 2025) - Windows

Description

Remediation

Severity

Classification

Published Date

Try Deep Scan Version

CyStack and Cookies

VietNam Office

Canada Office

Audit

Security Operations

Data Security

Security Compliance

Blockchain Security

Company

Resources