2023-07-13 00:00:00
mitre
PUBLISHED
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.