{"uuid": "b8923a12-cc79-4b62-9a43-ba8904e53f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/268", "content": "\ud83c\udfaf New Report #2905013: [SECURITY CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet](https://hackerone.com/reports/2905013)\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: nacl 123\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2024-12-17\n\u23f0 Disclosed: 2025-05-27 15:31:48\n\ud83d\udcdd Summary: A vulnerability was discovered in Apache Tomcat where a race condition could be triggered on a Windows machine with a write-enabled default servlet, leading to remote code execution. The issue was caused by the case-insensitive nature of the file system, which allowed an uploaded file to be treated as a JSP script.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:05.118201Z"}