CVE-2021-26703

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI...

PT-2021-17100

Name of the Vulnerable Software and Affected Versions EPrints version 3.4.2 Description The issue allows remote attackers to read arbitrary files and possibly execute commands by providing crafted JSON or XML input to the "cgi/ajax/phrase" API endpoint. Recommendations For EPrints version 3.4.2,...

CVE-2021-26703: Improper Restriction of XML External Entity Reference

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI...