CVE-2017-17459

http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL…

published December 7, 2017

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03168 · 87.8th percentile
Published
2017-12-07T18:00Z
EPSS history
Timeline
  • 07 DEC 18:00Z
    http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL…
    cvelistv5