PatchTheCVEtmall demo vulnerabilities and fixes
Recent CVEs affecting tmall demo, with upgrade or downgrade steps. 13 tracked.
Also searched as: tmalldemo.
tmall demo has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-05-25. Highest priority: CVE-2025-1843 (score 39/100).
- CVE-2025-5136 LOW 3.7 UPGRADE A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505
- CVE-2025-5135 LOW 2.4 UPGRADE A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505
- CVE-2025-5134 LOW 3.5 UPGRADE A vulnerability classified as problematic was found in Tmall Demo up to 20250505
- CVE-2025-5133 MEDIUM 4.3 UPGRADE A vulnerability classified as problematic has been found in Tmall Demo up to 20250505
- CVE-2025-5132 MEDIUM 4.3 UPGRADE A vulnerability was found in Tmall Demo up to 20250505
- CVE-2025-5131 MEDIUM 4.7 UPGRADE A vulnerability was found in Tmall Demo up to 20250505
- CVE-2025-5130 MEDIUM 4.7 UPGRADE A vulnerability was found in Tmall Demo up to 20250505
- CVE-2025-1843 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211
- CVE-2024-8568 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901
- CVE-2024-40560 HIGH 7.3 UPGRADE Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
- CVE-2024-40555 MEDIUM 5.3 DOWNGRADE Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.
- CVE-2024-40554 HIGH 7.5 DOWNGRADE An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
- CVE-2024-40553 MEDIUM 4.9 DOWNGRADE Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImag
FAQ
How do I fix tmall demo vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tmall demo being exploited right now?
None of the tracked tmall demo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tmall demo CVE should I patch first?
CVE-2025-1843 currently ranks highest (39/100): A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211.