Acme.sh Project vulnerabilities
Published CVEs affecting Acme.sh Project products: 1 record(s), with severity, exploitation and fixes.
CVE-2023-38198
Critical · 9.8
CWE-94 Jul 13, 2023
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the...
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.