Debian/commons-vfs: high 7.5
Relative Path Traversal vulnerability in Apache Commons VFS before 2.10.0. The FileObject API in Commons VFS has a 'resolveFile' method that takes a 'scope' parameter. Specifying 'NameScope.DESCENDENT
Action: Upgrade commons-vfs to 2.1-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1-5 | - |
Fixed versions
| 2.1-5 |
Sources
- osv: DEBIAN-CVE-2025-27553#Debian:14/commons-vfs
- https://security-tracker.debian.org/tracker/CVE-2025-27553
published · modified · JSON