CVE-2024-5279

The CVE-2024-5279 entry affects Qiwen Netdisk up to version 1.4.0, with a vulnerability in the File Rename Handler that allows stored cross-site scripting via a crafted file name. The attack vector is network-based and can be triggered remotely; it uses an input such as , and the vulnerability is...