Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability - CVE-2025-52434 - Vulnerability Database
Apache Tomcat

Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability - CVE-2025-52434

High
Reference: CVE-2025-52434
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-52434
Title: Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability
Overview:

Concurrent Execution using Shared Resource with Improper Synchronization (39Race Condition39) vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other older EOL versions may also be affected. Users are recommended to upgrade to version 9.0.107 which fixes the issue.