CVE-2021-26703

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI...

CVE-2021-26703

EPrints 3.4.2 is affected by CVE-2021-26703. The vulnerability enables remote attackers to read arbitrary files and, in some reports, may allow executing commands by sending crafted JSON/XML input to the cgi/ajax/phrase URI. Multiple connected sources corroborate an arbitrary file read condition ...