#!/bin/bash # Define Tomcat paths TOMCAT_HOME="/opt/tomcat" WEB_XML="$TOMCAT_HOME/conf/web.xml" CATALINA_JAR="$TOMCAT_HOME/lib/catalina.jar" # Ensure the catalina.jar file exists to extract version if [ ! -f "$CATALINA_JAR" ]; then echo "[-] Tomcat version file not found at: $CATALINA_JAR" exit 1 fi # Extract the version string from manifest version=$(unzip -p "$CATALINA_JAR" META-INF/MANIFEST.MF 2>/dev/null | grep 'Specification-Version' | awk '{print $2}' | tr -d '\r') if [ -z "$version" ]; then echo "[-] Could not determine Tomcat version." exit 1 else echo "[+] Detected Tomcat version: $version" fi # Parse version components IFS='.' read -r major minor patch <<< "$version" vulnerable=false # Check if version is in a vulnerable if [[ "$major" == "9" && "$patch" -lt 99 ]]; then vulnerable=true elif [[ "$major" == "10" && "$minor" == "1" && "$patch" -lt 35 ]]; then vulnerable=true elif [[ "$major" == "11" && "$patch" -lt 3 ]]; then vulnerable=true fi # If vulnerable, check mitigation status in web.xml if $vulnerable; then echo "[-] Version is VULNERABLE to CVE-2025-24813" readonly_status=$(grep -A6 'default' "$WEB_XML" | grep 'readonly' -A1 | grep 'true') partial_status=$(grep -A6 'default' "$WEB_XML" | grep 'allowPartialPut' -A1 | grep 'false') # Check readonly status if [ -n "$readonly_status" ]; then echo "[+] readonly = true (not vulnerable)" else echo "[-] readonly = false or missing" fi # Check allowPartialPut status if [ -n "$partial_status" ]; then echo "[+] allowPartialPut = false (not vulnerable)" else echo "[-] allowPartialPut = true or missing" fi # If both mitigations applied if [ -n "$readonly_status" ] && [ -n "$partial_status" ]; then echo "[+] Temporary mitigation applied for CVE-2025-24813" echo " It is recommended to upgrade to a non-vulnerable version." fi else echo "[+] Version is NOT vulnerable to CVE-2025-24813" fi

PoC video

Description