CVE-2023-5752

Summary

CVE-2023-5752 is a vulnerability affecting pip versions prior to 23.3. When installing a package from a Mercurial Version Control System (VCS) URL using pip, the specified Mercurial revision can be exploited to inject arbitrary configuration options into the "hg clone" call. This manipulation of Mercurial configuration can result in the installation of unintended or malicious repositories. This vulnerability does not impact users not installing from Mercurial.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.