A vulnerability classified as problematic has been found in Apache Tomcat up to 9.0.105/10.1.41/11.0.7. This affects an unknown part of the component Commons FileUpload. The manipulation leads to denial of service.

This vulnerability is uniquely identified as CVE-2025-48976. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.