2019-04-22 18:29:01 2019-08-06 21:15:13

A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

PARTIAL
Mercurial Mercurial 1.6.4 (not an official CPE) Mercurial Mercurial 1.6.3 (not an official CPE) Mercurial Mercurial 1.6.2 (not an official CPE) Mercurial Mercurial 1.6.1 (not an official CPE) Mercurial Mercurial 1.6.0 (not an official CPE) Mercurial Mercurial 1.7.0 (not an official CPE) Mercurial Mercurial 1.7.1 (not an official CPE) Mercurial Mercurial 1.7.2 (not an official CPE) Mercurial Mercurial 1.7.3 (not an official CPE) Mercurial Mercurial 1.7.4 (not an official CPE) Mercurial Mercurial 1.7.5 (not an official CPE) Mercurial Mercurial 1.8.0 (not an official CPE) Mercurial Mercurial 1.8.1 (not an official CPE) Mercurial Mercurial 1.8.2 (not an official CPE) Mercurial Mercurial 1.8.3 (not an official CPE) Mercurial Mercurial 1.8.4 (not an official CPE) Mercurial Mercurial 1.9.0 (not an official CPE) Mercurial Mercurial 1.9.1 (not an official CPE) Mercurial Mercurial 1.9.2 (not an official CPE) Mercurial Mercurial 1.9.3 (not an official CPE) Mercurial Mercurial 2.0.0 (not an official CPE) Mercurial Mercurial 2.0.1 (not an official CPE) Mercurial Mercurial 2.0.2 (not an official CPE) Mercurial Mercurial 2.1.0 (not an official CPE) Mercurial Mercurial 2.1.1 (not an official CPE) Mercurial Mercurial 2.1.2 (not an official CPE) Mercurial Mercurial 2.2.0 (not an official CPE) Mercurial Mercurial 2.2.1 (not an official CPE) Mercurial Mercurial 2.2.2 (not an official CPE) Mercurial Mercurial 2.2.3 (not an official CPE) Mercurial Mercurial 2.3.0 (not an official CPE) Mercurial Mercurial 2.3.1 (not an official CPE) Mercurial Mercurial 2.3.2 (not an official CPE) Mercurial Mercurial 2.4.0 (not an official CPE) Mercurial Mercurial 2.4.1 (not an official CPE) Mercurial Mercurial 2.4.2 (not an official CPE) Mercurial Mercurial 2.5.0 (not an official CPE) Mercurial Mercurial 2.5.1 (not an official CPE) Mercurial Mercurial 2.5.2 (not an official CPE) Mercurial Mercurial 2.5.3 (not an official CPE) Mercurial Mercurial 2.5.4 (not an official CPE) Mercurial Mercurial 2.6.0 (not an official CPE) Mercurial Mercurial 2.6.1 (not an official CPE) Mercurial Mercurial 2.6.2 (not an official CPE) Mercurial Mercurial 2.6.3 (not an official CPE) Mercurial Mercurial 2.7.0 (not an official CPE) Mercurial Mercurial 2.7.1 (not an official CPE) Mercurial Mercurial 2.7.2 (not an official CPE) Mercurial Mercurial 2.8.0 (not an official CPE) Mercurial Mercurial 2.8.1 (not an official CPE) Mercurial Mercurial 2.8.2 (not an official CPE) Mercurial Mercurial 2.9.0 (not an official CPE) Mercurial Mercurial 2.9.1 (not an official CPE) Mercurial Mercurial 2.9.2 (not an official CPE) Mercurial Mercurial 3.0.0 (not an official CPE) Mercurial Mercurial 3.0.1 (not an official CPE) Mercurial Mercurial 3.0.2 (not an official CPE) Mercurial Mercurial 3.1.0 (not an official CPE) Mercurial Mercurial 3.1.1 (not an official CPE) Mercurial Mercurial 3.1.2 (not an official CPE) Mercurial Mercurial 3.2.0 (not an official CPE) Mercurial Mercurial 3.2.1 (not an official CPE) Mercurial Mercurial 3.2.2 (not an official CPE) Mercurial Mercurial 3.2.3 Mercurial Mercurial 3.2.4 (not an official CPE) Mercurial Mercurial 3.3.0 (not an official CPE) Mercurial Mercurial 3.3.1 (not an official CPE) Mercurial Mercurial 3.3.2 (not an official CPE) Mercurial Mercurial 3.3.3 (not an official CPE) Mercurial Mercurial 3.4.0 (not an official CPE) Mercurial Mercurial 3.4.1 (not an official CPE) Mercurial Mercurial 3.4.2 (not an official CPE) Mercurial Mercurial 3.5.0 (not an official CPE) Mercurial Mercurial 3.5.1 (not an official CPE) Mercurial Mercurial 3.5.2 (not an official CPE) Mercurial Mercurial 3.6.0 (not an official CPE) Mercurial Mercurial 3.6.1 (not an official CPE) Mercurial Mercurial 3.6.2 (not an official CPE) Mercurial Mercurial 3.6.3 (not an official CPE) Mercurial Mercurial 3.7.0 (not an official CPE) Mercurial Mercurial 3.7.1 (not an official CPE) Mercurial Mercurial 3.7.2 (not an official CPE) Mercurial Mercurial 3.7.3 (not an official CPE) Mercurial Mercurial 3.8.0 (not an official CPE) Mercurial Mercurial 3.8.1 (not an official CPE) Mercurial Mercurial 3.8.2 (not an official CPE) Mercurial Mercurial 3.8.3 (not an official CPE) Mercurial Mercurial 3.8.4 (not an official CPE) Mercurial Mercurial 3.9.0 (not an official CPE) Mercurial Mercurial 3.9.1 (not an official CPE) Mercurial Mercurial 3.9.2 (not an official CPE) Mercurial Mercurial 4.0 (not an official CPE) Mercurial Mercurial 4.0.1 (not an official CPE) Mercurial Mercurial 4.0.2 (not an official CPE) Mercurial Mercurial 4.1 (not an official CPE) Mercurial Mercurial 4.1.0 (not an official CPE) Mercurial Mercurial 4.1.1 (not an official CPE) Mercurial Mercurial 4.1.2 (not an official CPE) Mercurial Mercurial 4.1.3 (not an official CPE) Mercurial Mercurial 4.2 (not an official CPE) Mercurial Mercurial 4.2.0 (not an official CPE) Mercurial Mercurial 4.2.1 (not an official CPE) Mercurial Mercurial 4.2.2 (not an official CPE) Mercurial Mercurial 4.2.3 (not an official CPE) Mercurial Mercurial 4.3 (not an official CPE) Mercurial Mercurial 4.3.0 (not an official CPE) Mercurial Mercurial 4.3.1 (not an official CPE) Mercurial Mercurial 4.3.2 (not an official CPE) Mercurial Mercurial 4.3.3 (not an official CPE) Mercurial Mercurial 4.4 (not an official CPE) Mercurial Mercurial 4.4.0 (not an official CPE) Mercurial Mercurial 4.4.1 (not an official CPE) Mercurial Mercurial 4.4.2 (not an official CPE) Mercurial Mercurial 4.5 (not an official CPE) Mercurial Mercurial 4.5.0 (not an official CPE) Mercurial Mercurial 4.5.1 (not an official CPE) Mercurial Mercurial 4.5.2 (not an official CPE) Mercurial Mercurial 4.5.3 (not an official CPE) Mercurial Mercurial 4.6 (not an official CPE) Mercurial Mercurial 4.6.0 (not an official CPE) Mercurial Mercurial 4.6.1 (not an official CPE) Mercurial Mercurial 4.6.2 (not an official CPE) Mercurial Mercurial 4.7 (not an official CPE) Mercurial Mercurial 4.7.0 (not an official CPE) Mercurial Mercurial 4.7.1 (not an official CPE) Mercurial Mercurial 4.7.2 (not an official CPE) Mercurial Mercurial 4.8.0 (not an official CPE) Mercurial Mercurial 4.8.1 (not an official CPE) Mercurial Mercurial 4.8.2 (not an official CPE)