CVE-2017-1000116

ADVISORY - github

Summary

Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.

EPSS Score⁠: 0.03608 (0.873)

ADVISORY - nist

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADVISORY - github

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Improper Input Validation

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.