CVE-2017-1000116

2017-08-10T19:18:29
ID RH:CVE-2017-1000116
Type redhatcve
Reporter redhat.com
Modified 2020-08-18T09:11:18

Description

A shell command injection flaw related to the handling of "ssh" URLs has been discovered in Mercurial. This can be exploited to execute shell commands with the privileges of the user running the Mercurial client, for example, when performing a "checkout" or "update" action on a sub-repository within a malicious repository or a legitimate repository containing a malicious commit.