CVE-2016-3068

Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository

published April 13, 2016

CVSS
—
EPSS
5%
Percentile
92.6
In the wild
Unconfirmed
What it is

Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05405 · 92.6th percentile
Published
2016-04-13T16:00Z
EPSS history
Timeline
  • 13 APR 16:00Z
    Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository
    cvelistv5