TI-2024-38436 CVE-2024-58352 · GHSA-xghx-f376-x86rLandray OA Unauthenticated HQL Injection via wechatLoginHelper.doPriority HIGH 77Landray OA contains an unauthenticated HQL injection vulnerability that allows unauthenticated attackers to query arbitrary Hibernate entity classes by injecting malicious HQL syntax into the uid POST parameter of the we…CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00896 · Published 2026-07-02 · No fix listed CWE-564
