getssl vulnerabilities
1 known vulnerability in getssl from ServerCo. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest first
- 7.4 High severity
getssl: External Control of File Name or Path
In ServerCo getssl version 2.49 and prior, the ACME challenge token returned to the client was not strictly validated against RFC 8555 before being used in challenge-file handling, allowing a maliciously crafted token to influence local path/filename usage dur