En resumen
- CVE-2019-3902 es una vulnerabilidad MEDIO (CVSS 5.9) que afecta a mercurial, mercurial (mercurial).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.4%, mayor que el 71.9% de las vulnerabilidades.
- Solución: actualizar a 4.9 o posterior.
Description
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
NVD description
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free