Security advisoryCVE-2020-19316
OS Command Injection in Laravel Framework
OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.
As published by the sources
Affected packages
- Affected
<5.8.17Fixed in5.8.17
Derived from the fixed versions above
What to do
Upgrade laravel/framework to 5.8.17 or later.
composer update laravel/framework --with-dependencies
To see which version you have installed, run composer show vendor/package. Running composer audit lists the known advisories that match your installed versions.
Quoted from the original advisory
Details
OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.
References
- Advisoryhttps://github.com/advisories/GHSA-w2pm-r78h-4m7v
- Advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2020-19316
- Webhttps://github.com/laravel/framework/commit/44c3feb604944599ad1c782a9942981c3991fa31
- Packagehttps://github.com/laravel/framework
- Webhttp://www.netbytesec.com/advisories/OSCommandInjectionInLaravelFramework