[SECURITY] CVE-2025-49125 Apache Tomcat - Security constraint bypass for pre/post-resources

CVE-2025-49125 Apache Tomcat - Security constraint bypass for pre/post-resources Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.7 Apache Tomcat 10.1.0-M1 to 10.1.41 Apache Tomcat 9.0.0.M1 to 9.0.105 Description: When using PreResou

[SECURITY] CVE-2025-49124 Apache Tomcat - Side-loading via Tomcat installer for Windows

CVE-2025-49124 Apache Tomcat - Side-loading via Tomcat installer for Windows Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.7 Apache Tomcat 10.1.0 to 10.1.41 Apache Tomcat 9.0.23 to 9.0.105 Description: During installation, the Tomcat in

[SECURITY] CVE-2025-48988 Apache Tomcat - DoS in multipart upload

CVE-2025-48988 Apache Tomcat - DoS in multipart upload Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.7 Apache Tomcat 10.1.0-M1 to 10.1.41 Apache Tomcat 9.0.0.M1 to 9.0.105 Description: Tomcat used the same limit for both request p

[SECURITY] CVE-2025-48976 Apache Tomcat - DoS in Commons FileUpload

CVE-2025-48976 Apache Tomcat - DoS in Commons FileUpload Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.7 Apache Tomcat 10.1.0-M1 to 10.1.41 Apache Tomcat 9.0.0.M1 to 9.0.105 Description: Apache Commons FileUpload provided a hard-c

Re: FileCountLimitExceededException with 10.1.42 / 11.0.8

Hi Mark, Thank you for your reply. For use-cases where we might not have (easy) access to the Tomcat-server config in the run environment: Is there a way to access the Connector object, or a different solution inside the Servlet to raise this limit to circumvent possible problems when up