PT-2024-28922 · Unknown · Tmall Demo

Rabbit · Published 2024-07-15 · Updated 2024-08-01 · CVE-2024-40560

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Tmall demo versions prior to 2024.07.03

Description A SQL injection issue was discovered in Tmall demo.

Recommendations For versions prior to 2024.07.03, update to version 2024.07.03 or later to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2024-40560

Affected Products

Tmall Demo

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-40560 · Security Note
• https://osv.dev/vulnerability/CVE-2024-40560 · Vendor Advisory
• https://t.me/cvedetector/880 · Telegram Post
• https://gitee.com/project_team/Tmall_demo/issues/IAAOT1 · Note