Arbitrary File Upload Vulnerability Discovered in Tmall_Demo
CVE-2024-40553

4.9MEDIUM

Key Information:

Vendor: Tmall
Status: Tmall Demo
Vendor: CVE Published:; 15 July 2024

🔔 Create Tmall Vulnerability Alert

What is CVE-2024-40553?

Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.

References

https://gitee.com/project_team/Tmall_demo/issues/IAANVC

CVSS V3.1

Score:

4.9

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 15, 2024

CVE-2024-40553 Data

.