Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-43406

LF Edge eKuiper has a SQL Injection in sqlKvStore

Description

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulnerability is fixed in 1.14.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

lf-edge ekuiper

  • < 1.14.2affected

References