CVE-2024-50379 and CVE-2024-56337 Apache Tomcat Remote Code Execution Vulnerability

Apache Tomcat vulnerability that can allow Remote Code Execution via write enabled Default Servlet.

• Content Manager

• Vulnerability

• Apache

Originally identified under CVE-2024-50379. Further mitigation was needed and an updated CVE for this is under CVE-2024-56337.

Update Content Manager to the lastest 2024.1 version or newer.

https://tylercommunity.tylertech.com/content-manager/b/weblog1/posts/tomcat-reported-vulnerabilities

https://tylercommunity.tylertech.com/content-manager/w/documentation-wiki/21530/release-lifecycle