Skip to content
OpenAdvisories

Vendor

eclipse-leshan

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    DDFFileParser in eclipse leshan is vulnerable to XXE Attacks

    Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser` and `DefaultDDFFileValidator` (and so `ObjectLoader`) are vulnerable to `XXE Attacks`. A DDF file is a LWM2M format used to store LWM2M object des…