Apache Tomcat Vulnerability: CVE-2025-24813 (4378829)

A security scan has identified vulnerability CVE-2025-24813 for the Apache Tomcat version used by Foglight.

Is Foglight affected by the Apache Tomcat Vulnerability CVE-2025-24813 for Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet?

The vulnerability is fixed in Apache Tomcat 9.0.99.

https://nvd.nist.gov/vuln/detail/CVE-2025-24813

The vulnerability requires a non-default configuration where write access is enabled on the Apache Tomcat default servlet.

Foglight is not affected as it uses the default configuration with the servlet in read-only mode.