Skip to content
OpenAdvisories

Package · Maven

org.eclipse.leshan:leshan-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-41034

    DDFFileParser in eclipse leshan is vulnerable to XXE Attacks

    Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser` and `DefaultDDFFileValidator` (and so `ObjectLoader`) are vulnerable to `XXE Attacks`. A DDF file is a LWM2M format used to store LWM2M object des…

    eclipse-leshan leshan org.eclipse.leshan:leshan-core Maven