Описание
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mercurial | fixed | 3.8.1-1 | package |
Примечания
https://selenic.com/hg/rev/a56296f55a5e
EPSS
Процентиль: 78%
0.0118
Низкий
Связанные уязвимости
CVSS3: 8.8
ubuntu
больше 9 лет назад
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
redhat
почти 10 лет назад
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
CVSS3: 8.8
nvd
больше 9 лет назад
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
EPSS
Процентиль: 78%
0.0118
Низкий