CVE-2018-1000132
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.7%
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1.
Affected products
n/a · n/aReferences
https://access.redhat.com/errata/RHSA-2019:2276https://lists.debian.org/debian-lts-announce/2018/03/msg00034.htmlhttps://lists.debian.org/debian-lts-announce/2018/07/msg00005.htmlhttps://lists.debian.org/debian-lts-announce/2020/07/msg00032.htmlhttps://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29