VDB

GCVE-VVD-MAGEIA-2019-250

GCVE-VVD-MAGEIA-2019-250
Advisory Published
Vulnetix · Advisory published December 31, 2019
It was discovered that Mercurial mishandled symlinks in subrepositories. An attacker could use this vulnerability to write arbitrary files to the target’s filesystem (CVE-2019-3902).

Affected Products

VendorProductVersionsPlatforms
Mageianvidia3400 (affected), 340.108-1.mga7.nonfree (unaffected)
Mageiamercurial0 (affected), 4.9.1-1.mga6 (unaffected), 0 (affected), 4.9.1-1.mga6 (unaffected)
Mageiamercurial0 (affected), 4.9.1-1.mga7 (unaffected), 0 (affected), 4.9.1-1.mga7 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›