CVE-2016-3068
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
Published: 2016-04-13 · CVSS: Unscored
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7