Information Disclosure Vulnerability in Apache Commons VFS FtpFileObject Before 2.10.0
A sensitive information disclosure vulnerability exists in Apache Commons VFS within the FtpFileObject class. When a file is not found, the exception message can accidentally reveal the original URI, potentially exposing passwords. This vulnerability affects Apache Commons VFS versions prior to 2.10.0. Users are advised to upgrade to version 2.10.0 to resolve the security issue and prevent unauthorized actors from accessing sensitive information through exception error messages.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apache software foundation apache commons vfs |
Vulmon