os-acme-client vulnerabilities
1 known vulnerability in os-acme-client from Opnsense. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.4average CVSS score
Latest first
- 9.4 Critical severity
os-acme-client: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gcloud_key model field and directly interpolates the string field