CVE-2024-52301
HIGH EXPLOITEDLaravel Framework < 6.20.45 - Environment Manipulation via Crafted Query String
Title source: llmExploitation Summary
CVE-2024-52301 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including Nyamort, martinhaunschmid, nanwinata.
AI-analyzed exploit summary This repository provides a detailed writeup and proof-of-concept for CVE-2024-52301, which exploits Laravel's environment detection mechanism by manipulating $_SERVER['argv'] via URL parameters when register_argc_argv is enabled in PHP. The vulnerability allows an attacker to override the application environment, affecting Blade directives and other environment-dependent logic.
Description
Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.
Exploits (4)
This repository provides a detailed writeup and proof-of-concept for CVE-2024-52301, which exploits Laravel's environment detection mechanism by manipulating $_SERVER['argv'] via URL parameters when register_argc_argv is enabled in PHP. The vulnerability allows an attacker to override the application environment, affecting Blade directives and other environment-dependent logic.
This PoC demonstrates CVE-2024-52301, a vulnerability in Laravel where GET parameters can manipulate application configuration due to improper handling of `--env` arguments. The exploit leverages `register_argc_argv` being enabled to treat query parameters as command-line arguments.
This script automates the detection of CVE-2024-52301, a Laravel environment manipulation vulnerability, by enumerating subdomains and testing them with crafted query strings. It checks for indicators of vulnerability in HTTP responses but does not include an exploit payload.
This repository contains a scanner script that checks for Laravel Arbitrary Argument Injection vulnerability (CVE-2024-52301) by enumerating subdomains and testing specific payloads. It does not include a functional exploit but detects potential vulnerabilities.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N