github.com/lf-edge/ekuiper vulnerabilities (Go)
10 vulnerabilities.
-
github.com/lf-edge/ekuiperGo LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint 5.5 Medium -
github.com/lf-edge/ekuiperGo LF Edge eKuiper: SSRF in External Service 5.5 Medium -
github.com/lf-edge/ekuiperGo LF Edge eKuiper: Self-XSS in External Service Creation 3.7 Low -
github.com/lf-edge/ekuiperGo LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction 9.3 Critical -
github.com/lf-edge/ekuiperGo eKuiper API endpoints handling SQL queries with user-controlled table names. 8.9 High -
github.com/lf-edge/ekuiperGo eKuiper /config/uploads API arbitrary file writing may lead to RCE 7.3 High -
github.com/lf-edge/ekuiperGo LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement 8.5 High -
github.com/lf-edge/ekuiperGo Stored XSS in Configuration Key Functionality 6.3 Medium -
github.com/lf-edge/ekuiperGo LF Edge eKuiper has Stored XSS in Rules Functionality 5.4 Medium -
github.com/lf-edge/ekuiperGo LF Edge eKuiper has a SQL Injection in sqlKvStore 8.8 High