Hi all, does anyone know if this impacts ACF? https://nvd.nist.gov/vuln/detail/CVE-2025-24813 https://www.bleepingcomputer.com/news/security/critical-rce-flaw-in-apache-tomcat-actively-exploited-in-attacks/

Posted a blog entry about this: https://www.petefreitag.com/blog/tomcat-writes-enabled/

We just use the apache connector but I still did a sanity check and could not find any writes that were enabled. So in it's default configuration of ACF there's nothing to worry about, gotcha 🙂 thanks!