egg-scripts-CVE-2018-3786

egg-scripts egg 프로젝트용 배포 도구입니다. 참고: Windows는 부분적으로 지원됩니다.22를 참조하세요. 설치 $ npm i egg-scripts --save 사용법 eggctl을 package.json 스크립트에 추가하세요: "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" 그런 다음 다음과 같이 실행합니다: npm start npm stop 참고: egg-scripts는 전역 설치를 권장하지 않습니다. npm 스크립트로 설치하여 사용해야...

@taotieh/back_giscom (1.0.7), @taotieh/back_giscom__sample (>=0.1.2, <=0.1.7) +4 more potentially affected by CVE-2018-3786 via egg-scripts (2.6.0)

egg-scripts NPM version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on egg-scripts and may be impacted: - @taotieh/backgiscom 1.0.7 - @taotieh/backgiscomsample =0.1.2, =0.2.0, =0.1.2, =0.1.9 - @taotieh/backgiscomtiletransform 0.0.0 Source cves:...

CVE-2018-3786

A command injection vulnerability in egg-scripts v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument...

CVE-2018-3786

CVE-2018-3786 affects egg-scripts prior to 2.8.1. A crafted command line argument enables command injection, allowing arbitrary shell command execution. Impact, per sources, is remote code execution in affected setups; exploitability is via untrusted input passed to egg-scripts. Remediation: upgr...

CVE-2018-3786

A command injection vulnerability in egg-scripts v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument...