Unrated
EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI.
CVE-2021-3342
First seen on SecPulse
References
- patch files.eprints.org
- patch files.eprints.org
- patch github.com