Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:21:07 +0000 CVE-2025-30474 — Apache Commons VFS: Failing to find an FTP file can reveal the URI's password in an error message https://cve.radiocsirt.org/vuln/cve-2025-30474 <p><strong>Affected:</strong> Apache Software Foundation Apache Commons VFS</p> <p>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Commons VFS.</p> <p>The FtpFileObject class can throw an exception when a file is not found, revealing the original URI in its message, which may include a password. The fix is to mask the password in the exception message This issue affects Apache Commons VFS: before 2.10.0.</p> <p>Users are recommended to upgrade to version 2.10.0, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Commons VFS</p> <p>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Commons VFS.</p> <p>The FtpFileObject class can throw an exception when a file is not found, revealing the original URI in its message, which may include a password. The fix is to mask the password in the exception message This issue affects Apache Commons VFS: before 2.10.0.</p> <p>Users are recommended to upgrade to version 2.10.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2025-30474