[{"vendor":"leokhoa","product":"laragon","defaultStatus":"unknown","cpes":["cpe:2.3:a:leokhoa:laragon:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThanOrEqual":"*","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-03-05T15:49:38.462358Z","id":"CVE-2024-0864","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Leo Khoa","product":"Laragon","defaultStatus":"unknown","repo":"https://github.com/leokhoa/laragon","versions":[{"version":"0","lessThanOrEqual":"*","versionType":"semver","status":"affected"}]}]

CWE-434

OR
          *cpe:2.3:a:laragon:laragon:*:*:*:*:*:*:*:* versions up to (excluding) 7.0.0

CERT.PL: https://cert.pl/en/posts/2024/02/CVE-2024-0864 Types: Third Party Advisory

CERT.PL: https://cert.pl/posts/2024/02/CVE-2024-0864 Types: Third Party Advisory

CERT.PL: https://laragon.org/ Types: Product

CVE: https://cert.pl/en/posts/2024/02/CVE-2024-0864 Types: Third Party Advisory

CVE: https://cert.pl/posts/2024/02/CVE-2024-0864 Types: Third Party Advisory

CVE: https://laragon.org/ Types: Product

https://cert.pl/en/posts/2024/02/CVE-2024-0864

https://cert.pl/posts/2024/02/CVE-2024-0864

https://laragon.org/

Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example.
By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin. 

Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example.
By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin.

CERT.PL CWE-434

CERT.PL CWE-20

CISA-ADP AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example.
By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin. 

CERT.PL CWE-20

CERT.PL https://cert.pl/en/posts/2024/02/CVE-2024-0864 [No types assigned]

CERT.PL https://cert.pl/posts/2024/02/CVE-2024-0864 [No types assigned]

CERT.PL https://laragon.org/ [No types assigned]