Filtered by vendor Lfedge Subscriptions
Filtered by product Ekuiper Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-43406 1 Lfedge 1 Ekuiper 2024-08-26 8.8 High
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulnerability is fixed in 1.14.2.