CVE-2024-40553 Information

Description

Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.

Reference

https://gitee.com/project_team/Tmall_demo/issues/IAANVC