org.eclipse.leshan:leshan-all (0.1.11-m14), org.eclipse.leshan:leshan-bsserver-demo (0.1.11-m14) +8 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m14)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m14 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m14 - org.eclipse.leshan:leshan-bsserver-demo 0.1.11-m14 ...

org.eclipse.leshan:leshan-all (0.1.11-m10), org.eclipse.leshan:leshan-bsserver-demo (0.1.11-m10) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m10)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m10 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m10 - org.eclipse.leshan:leshan-bsserver-demo 0.1.11-m10 ...

org.eclipse.leshan:leshan-all (0.1.11-m9), org.eclipse.leshan:leshan-bsserver-demo (0.1.11-m9) +7 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m9)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m9 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m9 - org.eclipse.leshan:leshan-bsserver-demo 0.1.11-m9 -...

org.eclipse.leshan:leshan-all (0.1.11-m12), org.eclipse.leshan:leshan-bsserver-demo (0.1.11-m12) +8 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m12)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m12 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m12 - org.eclipse.leshan:leshan-bsserver-demo 0.1.11-m12 ...

org.eclipse.leshan:leshan-all (0.1.10), org.eclipse.leshan:leshan-bs-server (0.1.10) +5 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.10)

org.eclipse.leshan:leshan-core MAVEN version 0.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.10 - org.eclipse.leshan:leshan-bs-server 0.1.10 -...

org.eclipse.leshan:leshan-all (0.1.11-m13), org.eclipse.leshan:leshan-bsserver-demo (0.1.11-m13) +8 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (0.1.11-m13)

org.eclipse.leshan:leshan-core MAVEN version 0.1.11-m13 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.leshan:leshan-core and may be impacted: - org.eclipse.leshan:leshan-all 0.1.11-m13 - org.eclipse.leshan:leshan-bsserver-demo 0.1.11-m13 ...

CVE-2023-41034

The CVE-2023-41034 issue affects Eclipse Leshan: DDFFileParser, DefaultDDFFileValidator (and ObjectLoader) are vulnerable to XXE Attacks when parsing untrusted DDF files. The root cause is exposure to XML External Entities. Remediation is to upgrade to fixed versions 1.5.0 or 2.0.0-M13; upgrades ...

CVE-2023-41034 DDFFileParser in eclipse leshan is vulnerable to XXE Attacks

Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser and DefaultDDFFileValidator and so ObjectLoader are vulnerable to XXE Attacks. A DDF file is a LWM2M format used to store LWM2M object description. Leshan users are impacted only if the...

io.rhiot:camel-lwm2m (>=0.1.3, <=0.1.4), io.rhiot:rhiot-cloudlet-binary (0.1.3) +22 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (>=0.1.10, <=1.4.2)

org.eclipse.leshan:leshan-core MAVEN version =0.1.10, =0.1.3, =0.1.1, =0.1.1, =0.1.10, =0.1.10, =0.1.11-m8, =0.1.10, =0.1.11-m2, =0.1.11-m2, =0.1.11-m8, =1.4.2 and more Source cves: CVE-2023-41034 Source advisory: MEND:CVE-2023-41034...

org.eclipse.leshan:leshan-bsserver-demo (>=2.0.0-m1, <=2.0.0-m12), org.eclipse.leshan:leshan-client-cf (>=2.0.0-m1, <=2.0.0-m12) +9 more potentially affected by CVE-2023-41034 via org.eclipse.leshan:leshan-core (>=2.0.0-m1, <=2.0.0-m12)

org.eclipse.leshan:leshan-core MAVEN version =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m1, =2.0.0-m5, =2.0.0-m1, =2.0.0-m1, =2.0.0-m5, =2.0.0-m1, =2.0.0-m1, =2.0.0-m12 Source cves: CVE-2023-41034 Source advisory: MEND:CVE-2023-41034...