acme.sh project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

acme.sh project records in CISA KEV

No acme.sh project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Acme.sh · all components

TI-2023-19611 CVE-2023-38198 · GHSA-p882-2j97-m4hp

MEDIUM 51

acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01079 Published 2023-07-13 No fix listed CWE-94