Atlassian Sourcetree For Macos vulnerabilities
4 known vulnerabilities affecting atlassian/sourcetree_for_macos.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH3
Vulnerabilities
Page 1 of 1
CVE-2018-20234HIGHCVSS 8.8≥ 1.2, < unspecified≥ unspecified, < 3.1.12019-03-08
CVE-2018-20234 [HIGH] CWE-88 CVE-2018-20234: There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 bef
There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
cvelistv5nvd
CVE-2018-13396HIGHCVSS 8.8≥ 1.0b2, < unspecified≥ unspecified, < 3.0.02018-11-05
CVE-2018-13396 [HIGH] CVE-2018-13396: There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before vers
There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
cvelistv5nvd
CVE-2018-13385CRITICALCVSS 9.8≥ unspecified, < 2.7.62018-07-24
CVE-2018-13385 [CRITICAL] CWE-88 CVE-2018-13385: There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial rep
There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. Versions of Sourcetree for macOS from 1.0b2 before 2.7.6 are affected by thi
cvelistv5nvd
CVE-2017-14592HIGHCVSS 8.8vVersions starting with 1.0b2 before version 2.7.02018-01-26
CVE-2017-14592 [HIGH] CWE-77 CVE-2017-14592: Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository
Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. From version 1.4.0 of Sourcetree for macOS, this vulnerability can be triggered from a web
cvelistv5nvd