Improper input validation in Project-Redcap Redcap

CVE-2012-6567

REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.015 (71.7th percentile) — read the EPSS interpretation.