github.com/lf-edge/ekuiper/v2 vulnerabilities (Go)
9 vulnerabilities.
-
github.com/lf-edge/ekuiper/v2Go LF Edge eKuiper: Arbitrary File and Directory Deletion via Path Traversal in Plugin Installation Endpoint 5.5 Medium -
github.com/lf-edge/ekuiper/v2Go LF Edge eKuiper: SSRF in External Service 5.5 Medium -
github.com/lf-edge/ekuiper/v2Go LF Edge eKuiper: Self-XSS in External Service Creation 3.7 Low -
github.com/lf-edge/ekuiper/v2Go LF Edge eKuiper is vulnerable to Arbitrary File Read/Write via unsanitized names and zip extraction 9.3 Critical -
github.com/lf-edge/ekuiper/v2Go eKuiper API endpoints handling SQL queries with user-controlled table names. 8.9 High -
github.com/lf-edge/ekuiper/v2Go eKuiper /config/uploads API arbitrary file writing may lead to RCE 7.3 High -
github.com/lf-edge/ekuiper/v2Go LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement 8.5 High -
github.com/lf-edge/ekuiper/v2Go Stored XSS in Configuration Key Functionality 6.3 Medium -
github.com/lf-edge/ekuiper/v2Go LF Edge eKuiper has Stored XSS in Rules Functionality 5.4 Medium