Skip to content
OpenAdvisories
Unscored CVE-2018-13385 EUVD-2018-5329GHSA-qmx8-jjxc-9jwh

There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission …

Published Jul 24, 2018 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Sourcetree for macOS Platform: macOS

Description

There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. Versions of Sourcetree for macOS from 1.0b2 before 2.7.6 are affected by this vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Sourcetree for macOS unspecified – < 2.7.6 2.7.6

References