CVE-2017-1000115

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Mercurial prior to version 4.3 is vulnerable to a missing symlink check that can malicious repositories to modify files outside the repository

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Oct 5, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-10001169.8Mercurial prior to 4.3 did not adequately sanitize hostnames passed to ssh, leading to possible shell-injection attacks.CVE-2017-10001178.8A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any progCVE-2017-10001187.5Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of ServiceCVE-2017-10001197.2October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other aCVE-2017-10001208.8[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitCVE-2017-10001219.8The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate message size metadata, allowing a compromisedCVE-2017-10001225.3The UNIX IPC layer in WebKit, including WebKitGTK+ prior to 2.16.3, does not properly validate certain message metadata, allowing a compromiCVE-2017-10001257.5Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.CVE-2017-10001265.5exiv2 0.26 contains a Stack out of bounds read in webp parserCVE-2017-10001275.5Exiv2 0.26 contains a heap buffer overflow in tiff parserCVE-2017-10001285.5Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parserCVE-2017-10001297.5Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure
CVE-2017-1000115: High severity, CVSS 7.5 | Vulnix