CVE-2021-26476

EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI...

PT-2021-17022

Name of the Vulnerable Software and Affected Versions EPrints version 3.4.2 Description The issue allows remote attackers to execute OS commands via crafted LaTeX input to a "cgi/cal?year=" URI. Recommendations For EPrints version 3.4.2, consider restricting access to the cgi/cal endpoint until a...