Approved changes feed: RSS · Atom
cpe:2.3:a:lfedge:ekuiper:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lfedge (0f7102cd-52d3-5aa9-ab97-500f0f1dba13) |
|---|---|
| Product | Ekuiper (4a2420ca-d530-5ddf-9151-97511a0ea191) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lf-edge/ekuiper |
purl2cpe | 2026-06-01 10:12:04.109529 |
pkg:golang/github.com/lf-edge/ekuiper |
purl2cpe | 2026-06-01 10:12:04.109532 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-52290 |
vulnerable | 2026-06-08 06:52:14.729567 |
Stored XSS in Configuration Key Functionality
MEDIUM (6.3)
LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service (e.g. kuiperUser role) can inject a cross-site scripting payload into Connection Configuration key `Name` (`confKey`) parameter. After this setup, when any user with access to this service (e.g. admin) tries to delete this key, a payload acts in the victim's browser. Version 2.1.0 fixes the issue.
Published: 2025-05-14T07:19:50.045Z
Updated: 2025-05-14T13:21:31.315Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43406 |
vulnerable | 2026-06-08 06:45:50.697804 |
LF Edge eKuiper has a SQL Injection in sqlKvStore
HIGH (8.8)
LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulnerability is fixed in 1.14.2.
Published: 2024-08-20T15:00:06.571Z
Updated: 2024-08-20T17:42:14.854Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.