Thanks for the post @jvandrot
The Qlik NPrinting product team and our security team are in constant communication around various identified security topics. This item is on our radar and is being planned for resolution in an Service Release for both the Qlik NPrinting May 2023 and Qlik NPrinting February 2024 build lines.
In the mean time it is worth noting that this vulnerability is not exploitable in Qlik NPrinting as the product does not allow users to construct such kind of query required to exploit the vulnerability. Even though the product accepts user input (which is sanitized as part of a defense-in-depth strategy), there is no way in the product to create the kind of query required for exploitation in this scenario.
A theoretical attack would require an advisory to get direct access to the NPrinting database as well as privileged filesystem access in addition to several other preconditions be met. If such escalated privileged access would be possible, there would other ways to yield more gain or access.
