ID | CVE-2017-9462 | ||||||
Sažetak | In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name. | ||||||
Reference |
|
||||||
CVSS |
|
||||||
Pristup |
|
||||||
Impact |
|
||||||
CVSS vektor | AV:N/AC:L/Au:S/C:C/I:C/A:C | ||||||
Zadnje važnije ažuriranje | 05-02-2020 - 18:32 | ||||||
Objavljeno | 06-06-2017 - 21:29 |