Vulnerability in Shenzhen Landray Software Co., Ltd. Landry Office Automation (Oa)
CVE-2024-58352
Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do…
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
References
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2024-58352?
- CVE-2024-58352 is a high-severity vulnerability in Shenzhen Landray Software Co., Ltd. Landry Office Automation (Oa), classified under CWE-564. CVSS score: 7.5/10. Published 2026-07-02.
- How severe is CVE-2024-58352?
- High severity. CVSS v3 base score is 7.5 out of 10.