Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-0864

RCE in Laragon

Description

Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example. By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Leo Khoa Laragon

Default version status: unknown

  • 0 to ≤ *affected

References