PT-2026-77281

Name of the Vulnerable Software and Affected Versions Lemur versions prior to 1.9.3 Description An issue exists where the validate acme url function fails to enforce the ACME DIRECTORY HOST ALLOWLIST when updating authority options via the 'PUT /api/1/authorities/' endpoint. A user with an...