Nicklas Karlsson wrote:
No, I don't even have commons.io packed in the WAR so I don't know where the reference comes from.
From what I see in that stacktrace, the SFSB object instance graph somehow refers to that class and the jar containing the class isn't present in the war. That leads to the NCDFE.
Maybe some of the JBoss Tattletale http://www.jboss.org/tattletale reports against that project, might help you figure out what class references the apache.common.io