CVE-2023-41034
1 advisory.
Maven/org.eclipse.leshan:leshan-core CVE-2023-41034: medium 6.5
DDFFileParser is vulnerable to XXE Attacks
Action: Upgrade org.eclipse.leshan:leshan-core to 1.5.0 (1.x) or 2.0.0-M13 (2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
| 2.0.0-M1 | 2.0.0-M13 | - |
Fixed versions
| 1.5.0 | 2.0.0-M13 |
Sources
- osv: GHSA-wc9j-gc65-3cm7
- https://github.com/eclipse-leshan/leshan/security/advisories/GHSA-wc9j-gc65-3cm7
- https://nvd.nist.gov/vuln/detail/CVE-2023-41034
- https://github.com/eclipse-leshan/leshan/commit/29577d2879ba8e7674c3b216a7f01193fc7ae013
- https://github.com/eclipse-leshan/leshan/commit/4d3e63ac271a817f81fba3e3229c519af7a3049c
- https://github.com/eclipse-leshan/leshan
- https://github.com/eclipse-leshan/leshan/wiki/Adding-new-objects#the-lwm2m-model
- https://owasp.org/www-community/vulnerabilities/XML_External_Entity_(XXE)_Processing
CVE-2023-41034 · published · modified · JSON