CVE-2017-1000115

Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository

published October 4, 2017

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04815 · 91.9th percentile
Published
2017-10-04T01:00Z
EPSS history
Timeline
  • 04 OCT 01:00Z
    Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository
    cvelistv5