Debian/commons-vfs: high 7.5
Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT
Action: Upgrade commons-vfs to 2.1-4+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1-4+deb12u1 | - |
Fixed versions
| 2.1-4+deb12u1 |
Sources
published · modified · JSON