Eclipse Foundation Ditto vulnerabilities
- eclipse foundation ditto In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto... 9.2 Critical
- eclipse foundation ditto In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values (e.g. {{ header:device_id }… 7.6 High
- eclipse foundation ditto In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without va… 5.3 Medium
- eclipse ditto Eclipse Ditto User Interface vulnerable to XSS due to Improper Neutralization of Input 6.5 Medium