Lucene search
PRIOn knowledge basePRION:CVE-2018-13396HistoryNov 05, 2018 - 10:29 p.m.
Design/Logic Flaw
2018-11-0522:29:00
PRIOn knowledge base
www.prio-n.com
6
There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sourcetree | ge | 1.0 | |
| sourcetree | lt | 3.0.0 | |
| sourcetree | eq | 1.0 beta2 | |
| sourcetree | eq | 1.0 beta3 | |
| sourcetree | eq | 1.0 beta4 | |
| sourcetree | eq | 1.0 beta5 | |
| sourcetree | eq | 1.0 rc1 |
References
Related
cve
cve
CVE-2018-13396
2018-11-05 22:29:00
cvelist
cvelist
CVE-2018-13396
2018-10-31 00:00:00
nvd
nvd
CVE-2018-13396
2018-11-05 22:29:00
zdt
zdt
Sourcetree Git Arbitrary Code Execution Vulnerability
2018-11-01 00:00:00
atlassian
atlassian