VDB

GCVE-VVD-MAGEIA-2017-282

GCVE-VVD-MAGEIA-2017-282
Advisory Published
Vulnetix · Advisory published August 19, 2017
Mercurial was not sanitizing hostnames passed to ssh, allowing shell injection attacks by specifying a hostname starting with -oProxyCommand.

Affected Products

VendorProductVersionsPlatforms
Mageiamercurial0 (affected), 4.1.3-1.1.mga6 (unaffected)—

Browse GCVE Records

930 records in the GCVE database · Updated November 4, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Lookup Community · 50/day Open Lookup ›