CVE-2018-3786

Source

https://nvd.nist.gov/vuln/detail/CVE-2018-3786

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-3786.json

Aliases

• GHSA-c9j3-wqph-5xx9

Published

2018-08-24T20:29:00Z

Modified

2023-11-29T06:36:06.386059Z

Details

A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.

References

• https://hackerone.com/reports/388936
• https://github.com/eggjs/egg-scripts/pull/26
• https://github.com/eggjs/egg-scripts/blob/2.8.1/History.md