Lucene search
PRIOn knowledge basePRION:CVE-2017-17536HistoryDec 11, 2017 - 7:29 a.m.
Code injection
2017-12-1107:29:00
PRIOn knowledge base
www.prio-n.com
5
Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phabricator | eq | < 20171110 |
Related
debiancve
debiancve
CVE-2017-17536
2022-10-03 16:23:19
CVE-2017-18026
2018-01-10 09:29:00
ubuntucve
ubuntucve
CVE-2017-17536
2017-12-11 00:00:00
CVE-2017-18026
2018-01-10 00:00:00
cve
cve
CVE-2017-17536
2022-10-03 16:23:19
CVE-2017-18026
2018-01-10 09:29:00
nvd
nvd
CVE-2017-17536
2017-12-11 07:29:00
CVE-2017-18026
2018-01-10 09:29:00
cvelist
cvelist
CVE-2017-17536
2022-10-03 16:23:19
CVE-2017-18026
2018-01-10 09:00:00
prion
prion
Sql injection
2018-01-10 09:29:00
osv
osv
CVE-2017-18026
2018-01-10 09:29:00