Lucene search

K
osvGoogleOSV:GO-2024-3078
HistoryAug 22, 2024 - 8:03 p.m.

LF Edge eKuiper has a SQL Injection in sqlKvStore in github.com/lf-edge/ekuiper

2024-08-2220:03:04
Google
osv.dev
4
lf edge
ekuiper
sql injection
sqlkvstore
github

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

20.0%

LF Edge eKuiper has a SQL Injection in sqlKvStore in github.com/lf-edge/ekuiper

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

20.0%