{"id":"CVE-2020-19316","details":"OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.","aliases":["GHSA-w2pm-r78h-4m7v"],"modified":"2026-07-08T19:01:46.971711Z","published":"2021-12-20T20:15:07.593Z","references":[{"type":"FIX","url":"https://github.com/laravel/framework/commit/44c3feb604944599ad1c782a9942981c3991fa31"},{"type":"EVIDENCE","url":"http://www.netbytesec.com/advisories/OSCommandInjectionInLaravelFramework/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/laravel/framework","events":[{"introduced":"0"},{"fixed":"33c04dd2a431adeeb49926a4f2b20590cc033ca2"},{"fixed":"44c3feb604944599ad1c782a9942981c3991fa31"}],"database_specific":{"cpe":"cpe:2.3:a:laravel:framework:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.8.17"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v5.8.16","v5.8.15","v5.8.14","v5.8.13","v5.8.12","v5.8.11","v5.8.10","v5.8.9","v5.8.8","v5.8.7","v5.8.6","v5.8.5","v5.5.1","v5.5.0","v4.1.0","v4.0.0","v4.0.0-BETA4","v4.0.0-BETA3","v4.0.0-BETA2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-19316.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}