critical9.8
CVE-2021-26476
EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.
Impact
EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eprints | Eprints | Version 3.4.2 |