{"cves":["CVE-2025-31651","CVE-2025-55752","CVE-2025-61795"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1:10.1.36-3.1]\n- Resolves: RHEL-124494\n  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)\n- Resolves: RHEL-91729\n  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)\n- Resolves: RHEL-132527\n  tomcat: Denial of service (CVE-2025-61795)","id":"ELSA-2025-23050","ovalId":"oval:com.oracle.elsa:def:202523050","source":"oracle_linux","title":"ELSA-2025-23050:  tomcat security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2025-23050.html"}