OS Command Injection in Laravel Framework

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-19316 · ADVISORY
• laravel/framework commit 44c3feb · WEB
• laravel/framework · PACKAGE
• netbytesec.com/advisories/OSCommandInjectionInLaravelFramework · WEB
• netbytesec.com/advisories/OSCommandInjectionInLaravelFramework · Exploit

laravel/framework 的其他漏洞

• CVE-2026-114509严重 9.2Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not rej…
• CVE-2026-114508中危 6.5Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can t…
• CVE-2026-102279低危 3.1Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-contro…
• CVE-2026-48019高危 8.9Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation,…
• GHSA-crmm-hgp2-wgrp中危 4.2Laravel Framework: Temporary Signed URL Path Confusion