AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-17536

HIGH · CVSS 8.8 EPSS 2.00%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-12-11 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It may be remotely exploitable.

CVE
CVE-2017-17536
Severity
HIGH
CVSS
8.8
EPSS
2.00%

Original NVD Description

Phabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring.