Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4g4j-672p-6638

Опубликовано: 29 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example. By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin.

Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example. By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin.

EPSS

Процентиль: 88%
0.03971
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-434

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

Enabling Simple Ajax Uploader plugin included in Laragon open-source software allows for a remote code execution (RCE) attack via an improper input validation in a file_upload.php file which serves as an example. By default, Laragon is not vulnerable until a user decides to use the aforementioned plugin.

EPSS

Процентиль: 88%
0.03971
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-434