CVE-2020-19316: Command Injection
Published Dec 20, 2021
·Updated
OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.
Affected Software
2 affected components
Laravel Framework<5.8.17
Microsoft Windows
Remediation
Event History
Dec 20, 2021
CVE Published
via MITRE·07:36 PM
Data Sourced
via MITRE·07:36 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-19316?
The severity of CVE-2020-19316 is high with a CVSS score of 8.8.
2
How does the OS Command injection vulnerability in function link in Filesystem.php occur?
The OS Command injection vulnerability in function link in Filesystem.php occurs due to insufficient input validation, allowing an attacker to execute arbitrary commands on the target system.
3
Which software versions are affected by CVE-2020-19316?
CVE-2020-19316 affects Laravel Framework versions before 5.8.17.
4
How can I fix the OS Command injection vulnerability in Laravel Framework?
To fix the OS Command injection vulnerability in Laravel Framework, update to version 5.8.17 or later.
5
Where can I find more information about CVE-2020-19316?
You can find more information about CVE-2020-19316 at http://www.netbytesec.com/advisories/OSCommandInjectionInLaravelFramework/ and https://github.com/laravel/framework/commit/44c3feb604944599ad1c782a9942981c3991fa31.