Описание
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mercurial | fixed | 3.7.3-1 | package |
Примечания
https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_3.7.3_.282016-3-29.29
https://selenic.com/repo/hg-stable/rev/34d43cb85de8
Связанные уязвимости
CVSS3: 8.8
ubuntu
больше 9 лет назад
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
redhat
больше 9 лет назад
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
CVSS3: 8.8
nvd
больше 9 лет назад
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
CVSS3: 8.8
github
больше 3 лет назад
Mercurial arbitrary code execution via a crafted git ext:: URL
