CVE Catalog
CVE-2023-38198
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.12%
62th percentile - higher than 62% of all known CVEs
Summary
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.
Risk Assessment
Exploitation of this vulnerability may lead to remote code execution, posing a serious security threat to the organization's systems.
Recommendation
It is recommended to update acme.sh to version 3.0.6 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.