mercurial

2 results · Clear filters · Feed

• Critical 9.1
  CVE-2018-1000132

  Mercurial Incorrect Access Control vulnerability

  Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have bee…

  mercurial mercurial mercurial mercurial Debian Ubuntu Alpine PyPI
  Mar 14, 2018
• Critical 9.8
  CVE-2017-1000116

  Mercurial is vulnerable to shell injection attack

  Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.

  mercurial mercurial mercurial mercurial Debian Ubuntu Alpine PyPI
  Oct 4, 2017