qiwen-file v1.4.0 was discovered to contain a SQL injection vulnerability via the component /mapper/NoticeMapper.xml.

Published Nov 26, 2024 · Updated Jul 5, 2026 · Assigned by mitre