critical9.8
CVE-2018-3786
A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.
Impact
A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eggjs | Egg-Scripts | before 2.8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/eggjs/egg-scripts/blob/2.8.1/History.md
- https://github.com/eggjs/egg-scripts/pull/26
- https://hackerone.com/reports/388936
- https://github.com/eggjs/egg-scripts/blob/2.8.1/History.md
- https://github.com/eggjs/egg-scripts/pull/26
- https://hackerone.com/reports/388936