Commons Vfs (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2025-03-23. Vendor: Apache.

CVEs of Commons Vfs

• CVE-2025-30474 - CVSS 5 (medium), 2025-03-23: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Commons VFS. The FtpFileObject class can throw an exception when a file is…
• CVE-2025-27553 - CVSS 7.5 (high), 2025-03-23: Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope'…