A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function
listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection.
This vulnerability was named CVE-2025-1224. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
