2 matches found
CVE-2017-17536
Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring...
8.8CVSS7.9AI score0.02005EPSS
SaveExploits0References1
CVE-2017-17536
Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring...
8.8CVSS9AI score
SaveExploits0References2
20