Vulnerabilities (CVE)

Filtered by vendor Lfedge Subscribe
Filtered by product Ekuiper
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-43406 1 Lfedge 1 Ekuiper 2024-08-26 N/A 8.8 HIGH
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulnerability is fixed in 1.14.2.