漏洞总结 漏洞概述 漏洞类型: 代码注入（Code Injection）- RCE 漏洞 CVSS 评分: 9.3 (Critical) 报告编号: #246 修复 PR: #275 影响范围 受影响文件: 受影响方法: 漏洞原理: 该方法直接将插件名称插入到 JavaScript 语句中，且未进行任何 sanitization。 攻击向量: 插件名称包含单引号（例如 `fs');writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync('/tmp/rce','PWNED');require('fs');fs.writeFileSync(