CVE-2024-0864

{"id": "CVE-2024-0864", "cveTags": [], "metrics": {}, "published": "2024-02-29T13:15:07.260", "references": [{"url": "https://cert.pl/en/posts/2024/02/CVE-2024-0864", "source": "cvd@cert.pl"}, {"url": "https://cert.pl/posts/2024/02/CVE-2024-0864", "source": "cvd@cert.pl"}, {"url": "https://laragon.org/", "source": "cvd@cert.pl"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cvd@cert.pl", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example.\nBy default, Laragon is not vulnerable until a user decides to use the\u00a0aforementioned plugin. \n"}, {"lang": "es", "value": "Habilitar el complemento Simple Ajax Uploader incluido en el software de c\u00f3digo abierto Laragon permite un ataque de ejecuci\u00f3n remota de c\u00f3digo (RCE) a trav\u00e9s de una validaci\u00f3n de entrada incorrecta en un archivo file_upload.php que sirve como ejemplo. De forma predeterminada, Laragon no es vulnerable hasta que un usuario decide utilizar el complemento antes mencionado."}], "lastModified": "2024-02-29T13:49:29.390", "sourceIdentifier": "cvd@cert.pl"}