CVE Catalog
CVE-2017-1000116
CriticalSummary
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code on the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade Mercurial to version 4.3 or later to mitigate this vulnerability.
Original NVD description (English source)
Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.