gregk4sec/CVE-2025-55668

PoC

Apache Tomcat - Session fixation via rewrite valve

view exploit source poc_in_githubauthor gregk4secpublished 2025-08-13catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-55668US	—	0.86% (58th)	Exploit	2025-08-13
Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 t…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.