tbr, 
Yikes, acme.sh is being abused by HiCA and they rely on RCE in acme.sh (and is not proper ACME protocol). Their use case looks benign, but still arbitrary RCE on client side! #infosec
https://github.com/acmesh-official/acme.sh/issues/4659
tbr, Yikes, acme.sh is being abused by HiCA and they rely on RCE in acme.sh (and is not proper ACME protocol). Their use case looks benign, but still arbitrary RCE on client side! #infosec
https://github.com/acmesh-official/acme.sh/issues/4659