CVE-2024-43406
CVSS V2 None
CVSS V3 None
Description
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulnerability is fixed in 1.14.2.
Overview
- CVE ID
- CVE-2024-43406
- Assigner
- GitHub_M
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-08-20T15:00:06.571Z
- Last Modified Date
- 2024-08-20T17:42:14.854Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://github.com/lf-edge/ekuiper/security/advisories/GHSA-r5ph-4jxm-6j9p | x_refsource_CONFIRM |
| https://github.com/lf-edge/ekuiper/commit/1a9c745649438feaac357d282959687012b65503 | x_refsource_MISC |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-43406 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43406 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-08-21 13:18:25 | Added to TrackCVE |