CVE-2016-3105 in Mercurial
Summary
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name.
Reservation
03/10/2016
Disclosure
05/09/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 87122 | Mercurial GIT Repository Name access control | 284 | Not defined | Official fix | CVE-2016-3105 |