CVE-2024-50942 is a critical SQL injection vulnerability affecting qiwen-file version 1.4.0 via the /mapper/NoticeMapper.xml component. The vulnerability allows remote attackers to inject malicious SQL queries without authentication, resulting in high impact on confidentiality, integrity, and availability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) confirms that exploitation requires no privileges or user interaction and can be performed over the network. No known exploits in the wild or vendor patches have been reported as of the publication date.

Successful exploitation of this SQL injection vulnerability can lead to unauthorized data disclosure, data modification, and denial of service against the affected qiwen-file 1.4.0 installation. Given the critical CVSS score, the impact includes full compromise of the affected system's database and potentially the entire application relying on it.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to restrict access to the vulnerable component, apply input validation or parameterized queries if possible, and monitor for suspicious activity related to SQL injection attempts.