CVE-2018-13397

Summary

There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.

Affected Software

VendorProductVersion RangeStatus
AtlassianSourcetree for Windows0.5.1.0 < unspecifiedaffected
AtlassianSourcetree for Windowsunspecified < 3.0.0affected

Weaknesses

  • Argument Injection

ADP Enrichment

CVE Program Container

Additional References

References