leshan vulnerabilities

1 known vulnerability in leshan from Eclipse-leshan. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  leshan: Improper Restriction of XML External Entity Reference

  CVE-2023-41034Aug 31, 2023Eclipse-leshan

  Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser` and `DefaultDDFFileValidator` (and so `ObjectLoader`) are vulnerable to `XXE Attacks`. A DDF file is a LWM2M format used to store LWM2M object desc