UpHeron
All vulnerabilities

Servers and applications

CVE-2025-61795

Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible…

Severity
Medium 5.3
Published
27 Oct 2025
Last changed
8 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
9.0.110, 10.0.27, 10.1.47, 11.0.12
Sources
NVD

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cpe:a:apache:tomcat
  • From 8.5.0 up to 8.5.100
  • From 9.0.0 before 9.0.110
  • From 10.0.0 before 10.0.27
  • From 10.1.0 before 10.1.47
  • From 11.0.0 before 11.0.12

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-61795
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-61795