Description
EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI.
Unscored
CVE-2021-3342
EUVD-2021-26673GHSA-px6h-j7vf-8699
EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?late…
Published Mar 1, 2021 · Updated Aug 3, 2024 · Assigned by mitre