VULNERABILITY INTELLIGENCE

CVE-2024-0864

CVSS score9.8 CRITICAL
EPSS probability1.37%
CISA KEVNot currently listed
Published2024-02-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example. By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin.

Weakness classification

  • cvd@cert.pl: CWE-434
  • nvd@nist.gov: CWE-434

Primary references