[rwth-security] acme.sh runs arbitrary commands from a remote server

Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] FYI

"acme.sh runs arbitrary commands from a remote server"

--> gefunden via tweet zu 'A Chinese certificate authority ("HiCA", https://www1.hi.cn/en/) is injecting arbitrary commands into the ACME challenge process'

VG

Bernd

[0] https://github.com/acmesh-official/acme.sh/issues/4659