Skip to content
OpenAdvisories

Vendor

lf-edge

4 known vulnerabilities.

Products

ekuiper 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-52290

    Stored XSS in Configuration Key Functionality

    LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service (e.g. kuiperUser role) can inject a cross-site scripting payload into Connection Configura…

    lf-edge ekuiper github.com/lf-edge/ekuiper github.com/lf-edge/ekuiper/v2 Go
  • Medium 5.4
    CVE-2024-52812

    LF Edge eKuiper has Stored XSS in Rules Functionality

    LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service (e.g. kuiperUser role) can inject a cross-site scripting payload into the rule `id` parameter. Then, after an…

    lf-edge ekuiper github.com/lf-edge/ekuiper github.com/lf-edge/ekuiper/v2 Go