3 matches found
CVE-2024-40553
Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage...
4.9CVSS7.8AI score0.00338EPSS
SaveExploits0References1
CVE-2024-40553
Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage...
4.9CVSS0.00338EPSS
SaveExploits0References1
CVE-2024-40553
Tmall_demo version v2024.07.03 is vulnerable to an arbitrary file upload via the uploadUserHeadImage component. This vulnerability (CWE-434) allows an attacker to upload files of dangerous types, potentially leading to a compromise of system integrity. To mitigate this risk, it is recommended to ...
4.9CVSS7.6AI score0.00338EPSS
SaveExploits0References1Affected Software1
20