REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule.

Published Jun 17, 2013 · Updated Sep 16, 2024 · Assigned by mitre