Lucene search
+L

1 matches found

OSV
OSV
added 2024/08/20 8:4 p.m.20 views

GHSA-R5PH-4JXM-6J9P LF Edge eKuiper has a SQL Injection in sqlKvStore

Summary A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. Details I will use explainRuleHandler "/rules/name/explain" as an example to illustrate. However, this vulnerability also exists in other methods such as...

8.8CVSS9AI score0.00894EPSS
SaveExploits1References5
Rows per page
Query Builder