CyberSecBulletin

Eclipse-leshan vulnerabilities

We track 1 vulnerability in Eclipse-leshan products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2023.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Eclipse-leshan vulnerabilities

  • 9.8 Critical severity

    leshan: Improper Restriction of XML External Entity Reference

    CVE-2023-41034Eclipse-leshan

    Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser` and `DefaultDDFFileValidator` (and so `ObjectLoader`) are vulnerable to `XXE Attacks`. A DDF file is a LWM2M format used to store LWM2M object desc