Affects Version/s: 7.0.5 CE GA6
Fix Version/s: None
Component/s: User Management > Personal Data
In account settings - User Info - "Upload Image" there is a limit to upload only 300kb of file size but this can be bypassed. The parameter used to verify file size is in the post request - com*_liferay_image_uploader_web_portlet_ImageUploaderPortlet_maxFileSize*=30720 (default value). If you increase it to 3kb or so, it will let you upload a bigger file.
The uploaded file sits on the server in this temporary location - _com_liferay_image_uploader_web_portlet_ImageUploaderPortlet_tempImageFileName
File location -
However, please note the "Save" request eventually fails on the user information page, so the image is actually not Saved permanently on the server. But still a bigger image gets uploaded on to the server which eventually can be misused to upload huge file sizes on server and eating up space on the server.
Please let me know if you need more information.