← Back

Phabricator

phabricator

Vendor: Phacility • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-17536
1Phacility
1Phabricator
May 13, 2026
Dec 11, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins...Show more
Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring.Show less