CVE-2024-58352Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the wechatLoginHelper.do endpoint. Attackers can exploit the lack of input sanitization in the string-concatenated filter expression passed to the Hibernate findList() call to extract sensitive data such as administrator password hashes and, with sufficient database privileges, perform file-write operations enabling remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-03-11 (UTC).

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-564

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-07-02); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-02	2	Disclosure2
2026-07-13	1	Disclosure1

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds80d
Disclosure
CVE-2024-58352 Unauthenticated HQL Injection in Landray OA Enabling Remote Code ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-58352 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces CVE‑2024‑58352, describing an unauthenticated HQL injection that could lead to remote code execution in Landray OA, and links to additional vulnerability details.
0000092
4.1K followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2024-58352 Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting mali… https://www.cve.org/CVERecord?id=CVE-2024-58352 ----- Traducción: CVE-2024-58352 Lan… http://infoflow.cloud`
Post summary
The post announces CVE-2024-58352, describing an unauthenticated Hibernate HQL injection that lets attackers query any entity classes, but provides no PoC, exploit, or patch information.
0000033
91 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2024-58352 Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting mali… https://www.cve.org/CVERecord?id=CVE-2024-58352
Post summary
The post announces the discovery of an unauthenticated HQL injection vulnerability in Landray OA that lets attackers query arbitrary Hibernate entity classes.
00000674
57.7K followersView on X

Explore more

Back to dashboard