CVE-2021-34080

Name of the Vulnerable Software and Affected Versions es128 ssl-utils version 1.0.0

Description The issue allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest() and the createCert() functions.

Recommendations For es128 ssl-utils version 1.0.0, as a temporary workaround, consider disabling the createCertRequest() and createCert() functions until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.