CVE-2017-12836

HIGH · CVSS 7.5 EPSS 5.97%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-08-24 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-12836

Severity

HIGH

CVSS

7.5

EPSS

5.97%

Original Filing — NVD Description

CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL with a crafted hostname, as demonstrated by "-oProxyCommand=id;localhost:/bar."