CVE-2022-34924 Information

Description

Lanling OA Landray Office Automation (OA) internal patch number 133383/137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp.

Reference

https://developpaper.com/lanling-oa-foreground-arbitrary-file-reading-vulnerability-exploitation/ https://codeantenna.com/a/DXQfemaZEH