En bref
- CVE-2019-3902 est une vulnérabilité MOYENNE (CVSS 5.9) touchant mercurial, mercurial (mercurial).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.4%, plus élevée que 71.9% des vulnérabilités.
- Correctif : mettre à jour vers 4.9 ou plus récent.
Description
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
NVD description
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free