CVE-2018-3786

State: Published
Severity: Not scored
Published: Aug 24, 2018
Updated: Sep 16, 2024
Reserved: Dec 28, 2017

Description

A command injection vulnerability in egg-scripts <v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument.

Scores

The record has no CVSS score.

Weaknesses

CWE-77 Command Injection - Generic (CWE-77)

Affected Products

Product	Versions
egg-scriptsEgg	2.8.1Affected

References

https://github.com/eggjs/egg-scripts/pull/26
https://hackerone.com/reports/388936
https://github.com/eggjs/egg-scripts/blob/2.8.1/History.md

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.