Vendor/product archive

apache / commons_vfs CVEs

Beta · best-effort

2 CVEs tagged to apache / commons_vfs — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to apache vendor archive

CVE-2025-30474

Published Mar 23, 2025

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Commons VFS. The FtpFileObject class can throw an exception when a file is not found, revealing…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2025-27553

Published Mar 23, 2025

Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying…

CVSS 7.5 · High

evidence mentions: 3
Buzz score: 25.4

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1