4 matches found
Directory traversal
Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...
6.8CVSS6.6AI score0.01901EPSS
SaveExploits3References13Affected Software1
CVE-2008-2942
Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...
6.8CVSS6.4AI score0.01901EPSS
SaveExploits3References13
CVE-2008-2942
Mercurial contains a directory-traversal vulnerability in patch.py (applydiff) that allows a user-assisted attacker to modify arbitrary files via ",.." sequences in a patch. The issue is tied to Mercurial 1.0.1-era code paths and can affect import/patch handling, potentially enabling file renamin...
6.8CVSS6.2AI score0.01901EPSS
SaveExploits3References13Affected Software1
20