Unknown · Qiwen-File · CVE-2024-50942
Name of the Vulnerable Software and Affected Versions:
qiwen-file version 1.4.0
Description:
The issue is related to a SQL injection vulnerability. It affects the component `/mapper/NoticeMapper.xml`.
Recommendations:
For qiwen-file version 1.4.0, consider restricting access to the `/mapper/NoticeMapper.xml` component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.