CWE-698

tomcat: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE) (CVE-2026-74049)

A flaw was found in Apache Tomcat. The application fails to halt execution after sending an HTTP redirect response, resulting in an Execution After Redirect (EAR) condition. A remote attacker could exploit this flaw by ignoring the redirec…