CVE-2025-31651

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

• CWE-116
• CWE-116

• https://lists.apache.org/list.html?announce@tomcat.apache.orgMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2025/04/28/3Mailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html

Published

Apr 28, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-31645Uncontrolled search path for some System Event Log Viewer Ut…6.7
• CVE-2025-31647Uncontrolled search path for some Intel(R) Graphics Software…6.7
• CVE-2025-31648Improper handling of values in the microcode flow for some I…3.9
• CVE-2025-31649A hard-coded password vulnerability exists in the ControlVau…8.7
• CVE-2025-3165A vulnerability classified as critical has been found in thu…5.3
• CVE-2025-31650Improper Input Validation vulnerability in Apache Tomcat. In…7.5
• CVE-2025-31654An attacker can get information about the groups of the smar…6.9
• CVE-2025-31655Incorrect default permissions for some Intel(R) Battery Life…6.7
• CVE-2025-3166A vulnerability classified as critical was found in code-pro…7.8
• CVE-2025-3167A vulnerability, which was classified as problematic, has be…7.5
• CVE-2025-31672Improper Input Validation vulnerability in Apache POI. The i…5.3
• CVE-2025-31673Incorrect Authorization vulnerability in Drupal Drupal core …4.6