onyx

onyx --cves cve-2024-52301

CVE-2024-52301

HIGHKEVPOCLaravel
score
<0.1
cvss
7.5
epss
44.8%
published
2024-11-12
kev added
2025-06-08
first seen

Laravel contains a vulnerability caused by the register_argc_argv PHP directive being set to on, allowing attackers to craft URL query strings to change the environment used by the framework, exploit requires the directive to be enabled and the server to be non-CLI.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2024-11-12 — PublishedP2025-06-08 — Added to CISA KEVK2026-10-21 — Tracked by OnyxT2026-10-21 — Public PoCXscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 44.8%2026-09-23: epss 44.8%2026-09-24: epss 44.8%2026-09-25: epss 44.8%2026-09-26: epss 44.8%2026-09-27: epss 44.8%2026-09-29: epss 44.8%2026-09-30: epss 44.8%2026-10-01: epss 44.8%2026-10-02: epss 44.8%2026-10-03: epss 44.8%2026-10-04: epss 44.8%2026-10-05: epss 44.8%2026-10-06: epss 44.8%2026-10-07: epss 44.8%2026-10-08: epss 44.8%2026-10-09: epss 44.8%2026-10-10: epss 44.8%2026-10-11: epss 44.8%2026-10-12: epss 44.8%2026-10-13: epss 44.8%2026-10-14: epss 44.8%2026-10-15: epss 44.8%2026-10-16: epss 44.8%2026-10-18: epss 44.8%2026-10-19: epss 44.8%2026-10-20: epss 44.8%2026-10-21: epss 44.8%44.8%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Added to CISA KEV
  3. Tracked by Onyx
  4. Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-88

References 3