CVE-2024-50942: Qiwenshare Qiwen-File

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

qiwen-file v1.4.0 was discovered to contain a SQL injection vulnerability via the component /mapper/NoticeMapper.xml.

Affected products

• Qiwenshare Qiwen-File: version 1.4.0 only

Published 2024-11-26. Last modified 2026-07-05.