PatchTheCVEproject team vulnerabilities
Recent CVEs affecting project team products. 13 tracked.
project team has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-05-25. Highest priority: CVE-2025-1843 (score 39/100).
- CVE-2025-5136 LOW 3.7 UPGRADE A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505
- CVE-2025-5135 LOW 2.4 UPGRADE A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505
- CVE-2025-5134 LOW 3.5 UPGRADE A vulnerability classified as problematic was found in Tmall Demo up to 20250505
- CVE-2025-5133 MEDIUM 4.3 UPGRADE A vulnerability classified as problematic has been found in Tmall Demo up to 20250505
- CVE-2025-5132 MEDIUM 4.3 UPGRADE A vulnerability was found in Tmall Demo up to 20250505
- CVE-2025-5131 MEDIUM 4.7 UPGRADE A vulnerability was found in Tmall Demo up to 20250505
- CVE-2025-5130 MEDIUM 4.7 UPGRADE A vulnerability was found in Tmall Demo up to 20250505
- CVE-2025-1843 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211
- CVE-2024-8568 MEDIUM 6.3 UPGRADE A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901
- CVE-2024-40560 HIGH 7.3 UPGRADE Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
- CVE-2024-40555 MEDIUM 5.3 DOWNGRADE Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.
- CVE-2024-40554 HIGH 7.5 DOWNGRADE An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
- CVE-2024-40553 MEDIUM 4.9 DOWNGRADE Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImag
FAQ
How do I fix project team vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is project team being exploited right now?
None of the tracked project team CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which project team CVE should I patch first?
CVE-2025-1843 currently ranks highest (39/100): A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211.