Researcher Recreates Lawful TLS Wiretap via CVE-2023-38198 Exploit
A security researcher reproduced the 2023 jabber.ru lawful TLS interception by chaining the acme.sh command‑injection vulnerability (CVE‑2023‑38198) with compromised network routing. The proof‑of‑concept shows how an unpatched acme.sh server can enable a covert man‑in‑the‑middle, exposing risks in state‑mandated wiretaps.