Description
EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.
Unscored
CVE-2021-26704
EUVD-2021-13494GHSA-xm78-jfcw-x97f
EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.
Published Mar 1, 2021 · Updated Aug 3, 2024 · Assigned by mitre