CVE-2018-13386

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. Versions of...

CVE-2018-13385

There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. Versions of Sourcetree...

CVE-2018-13386

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. Versions of...

CVE-2018-13386

CVE-2018-13386 affects Sourcetree for Windows. The vulnerability is an argument injection via filenames in Mercurial repositories, exploitable by a user who can commit to a linked Mercurial repo, to gain code execution on the system. Affected versions are Sourcetree for Windows prior to 2.6.9. Re...

CVE-2018-13385

Sourcetree for macOS is affected in versions 1.0b2 through before 2.7.6 by an argument injection vulnerability via filenames in Mercurial repositories. An attacker who can commit to a linked Mercurial repo can exploit this to gain code execution on the host. Root cause: unsafe handling of reposit...

PT-2018-11787

Name of the Vulnerable Software and Affected Versions Sourcetree for Windows versions prior to 2.6.9 Description The issue allows an attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows to exploit an argument injection vulnerability via filenames in these...

CVE-2018-13386: Improper Neutralization of Argument Delimiters in a Command

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. Versions of...

CVE-2018-13385: Improper Neutralization of Argument Delimiters in a Command

There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. Versions of Sourcetree...

PT-2018-11786

Name of the Vulnerable Software and Affected Versions Sourcetree for macOS versions 1.0b2 through 2.7.6 Description The issue is related to an argument injection vulnerability in Sourcetree for macOS, specifically via filenames in Mercurial repositories. An attacker who has permission to commit t...

Atlassian Sourcetree for Windows Injection Vulnerability

Atlassian Sourcetree for Windows is a free Windows-based Git and Mercurial client tool from Atlassian Australia that manages repositories using a visual interface. A security vulnerability exists in Atlassian Sourcetree for Windows prior to version 2.5.5.0. An attacker can exploit the vulnerabili...

Design/Logic Flaw

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the...

CVE-2018-5226

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the...

CVE-2018-5226

The CVE-2018-5226 issue affects Sourcetree for Windows (all versions prior to 2.5.5.0). The vulnerability is an argument injection flaw in the Mercurial repository tag name, which an attacker who can create a tag on a linked Mercurial repo can exploit to gain code execution on the host. Root caus...

CVE-2018-5226

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the...

PT-2018-16817

Name of the Vulnerable Software and Affected Versions Sourcetree for Windows versions prior to 2.5.5.0 Description The issue allows an attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows to exploit an argument injection vulnerability. This can lead ...

CVE-2018-5226: Undefined Security Weakness

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the...

Incorrect user showing up in configuration for GPG key signing

When configuring SourceTree to use GPG key signing for commits, an incorrect user is used for a given key. The user shows up as "0", rather than the user that was used to create the key. !gpgconfig.png|width=488,height=316! For more details see the post in the community forum here:...

SourceTree by Atlassian Detection

Binary data atlassiansourcetreedetect.nbin...

Atlassian SourceTree 0.5.1.0 < 2.4.7.0 Multiple Vulnerabilities

The version of Atlassian SourceTree installed on the remote Windows host is a version 0.5.1.0 prior to 2.4.7.0. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. C...

Atlassian Sourcetree for Windows Command Injection Vulnerability

Atlassian Sourcetree for Windows is a free Windows-based Git and Mercurial client tool from the Australian company Atlassian that manages repositories using a visual interface. A security vulnerability exists in Atlassian Sourcetree for Windows versions 0.5.1.0 through 2.4.7.0 excluding version...