CVE-2024-52812
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Mar 10, 2025
CWE ID 79
Summary
CVE-2024-52812 is a cross-site scripting (XSS) vulnerability affecting LF Edge eKuiper, an internet-of-things data analytics and stream processing engine. Users with the ability to modify services, such as those with the kuiperUser role, can inject malicious code into the rule `id` parameter. Subsequently, any user accessing the service, including administrators, who attempt to modify a rule, trigger the payload in their browser. This issue has been addressed in version 2.0.8 of eKuiper.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.