CVE-2023-38198

Published July 13th, 2023

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.

acmesh-official/acme.sh

A pure Unix shell script ACME client for SSL / TLS certificate automation

GitHub

47K