CVE-2010-4237

CVE-2010-4237 describes a vulnerability in Mercurial versions prior to 1.6.4 where the software fails to properly validate the Common Name field in SSL certificates. This oversight enables remote attackers, possessing a certificate signed by a Certificate Authority, to execute man-in-the-middle (MitM) attacks. The vulnerability carries a CVSS score of 5.9 (Medium) due to its network-based attack vector and high impact on integrity, though it requires high attack complexity. Despite its age, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage, indicating a low current threat level.