CVE-2025-30474

Summary

CVE-2025-30474 is a vulnerability affecting Apache Commons VFS before version 2.10.0. The FtpFileObject class in this software can expose sensitive information, specifically passwords, when a file is not found during an FTP operation. The error message revealing the password can be intercepted by an unauthorized actor. To address this issue, the password should be masked in the exception message. To protect against this vulnerability, it is strongly recommended that users upgrade to Apache Commons VFS version 2.10.0, which includes the necessary patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.