EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.

Published Mar 1, 2021 · Updated Aug 3, 2024 · Assigned by mitre