high8.8
CVE-2021-26704
EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.
Impact
EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eprints | Eprints | Version 3.4.2 |