~ / search / GHSA-4mr4-7vjv-9hm6

GHSA-4mr4-7vjv-9hm6

Mercurial Incorrect Access Control vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2018-1000132

Packages

EcosystemPackageAffectedFixed in
PyPI mercurial < 4.5.1 4.5.1

Details

As written in the advisory (Markdown source, shown as plain text).

Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1.

References

External links from the advisory. They lead to third-party sites.