未評価
EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.
CVE-2021-26476
SecPulse初出
参照URL
- patch files.eprints.org
- patch github.com