Directory traversal vulnerability in patch.py in Mercurial 1.0.1 allows user-assisted attackers to modify arbitrary files via ".." (dot dot) sequences in a patch file.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| mercurial(PyPI) | 0 | 1.0.2 | N/A |
CVSS Metrics