212 matches found
CVE-2024-21697
This High severity RCE Remote Code Execution vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has...
CVE-2024-21697
CVE-2024-21697 : The vulnerability affects Atlassian SourceTree for Mac (version 4.2.8) and Windows (version 3.4.19). It is a remote code execution (RCE) vulnerability that allows an unauthenticated attacker to execute arbitrary code with high impact to confidentiality, integrity, and availabilit...
PT-2024-8649
Name of the Vulnerable Software and Affected Versions Sourcetree for Mac versions 4.2.8 Sourcetree for Windows versions 3.4.19 Description The issue is related to incorrect code generation management in the visual Git client SourceTree. Exploitation of this issue may allow a remote attacker to...
Atlassian Sourcetree 安全漏洞
Atlassian Sourcetree is a free Git and Mercurial client tool from Atlassian Australia that manages repositories using a visual interface. A security vulnerability exists in Atlassian Sourcetree Mac version 4.2.8 and Windows version 3.4.19, which stems from vulnerability to remote code execution...
CVE-2024-21697: Undefined Security Weakness
This High severity RCE Remote Code Execution vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has...
RCE (Remote Code Execution) in Sourcetree for Mac and Sourcetree for Windows
This High severity RCE Remote Code Execution vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has...
CVE-2023-22514
This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...
SourceTree Code Execution
The vulnerability of the visual Git client SourceTree is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
PT-2023-6858 · Atlassian · Sourcetree
Name of the Vulnerable Software and Affected Versions: SourceTree affected versions not specified Description: The issue is related to insufficient input validation in the visual Git client SourceTree. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At...
Atlassian Sourcetree Remote Code Execution Vulnerability
Atlassian Sourcetree is a free Git and Mercurial client tool from Atlassian Australia that manages repositories using a visual interface. A remote code execution vulnerability exists in Atlassian Sourcetree version 3.4.14, which stems from a security flaw in a component or feature that allows an...
Atlassian SourceTree 3.4.14 RCE
The version of Atlassian SourceTree installed on the remote Windows host is version 3.4.14. It is, therefore, affected by a remote code execution vulnerability. An attacker, with the interaction of an authorized user, can execute arbitrary code on the affected host. Note that Nessus has not teste...
RCE (Remote Code Execution) in Sourcetree for Mac and Sourcetree for Windows
This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...
Exploit for Uncontrolled Search Path Element in Git_Large_File_Storage_Project Git_Large_File_Storage
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .b...
Exploit for Uncontrolled Search Path Element in Git_Large_File_Storage_Project Git_Large_File_Storage
Git-lfs Remote Code Execution RCE exploit CVE-2020-27955 .b...
RCE via git-lfs in Sourcetree for Windows - CVE-2021-21237
There was an argument injection vulnerability in SourceTree for Windows introduced through git-lfs. An attacker could create a malicious repository which, after being cloned in SourceTree for Windows and enabled with git-lfs, is able to exploit this issue to gain code execution on the system. Thi...
RCE via git-lfs in Sourcetree for Windows - CVE-2021-21237
There was an argument injection vulnerability in SourceTree for Windows introduced through git-lfs. An attacker could create a malicious repository which, after being cloned in SourceTree for Windows and enabled with git-lfs, is able to exploit this issue to gain code execution on the system. Thi...
RCE via git-lfs in Sourcetree for Windows - CVE-2020-27955
There was an argument injection vulnerability in SourceTree for Windows introduced through git-lfs. An attacker could create a malicious repository which, after being cloned in SourceTree for Windows and enabled with git-lfs, is able to exploit this issue to gain code execution on the system...
RCE via git-lfs in Sourcetree for Windows - CVE-2020-27955
There was an argument injection vulnerability in SourceTree for Windows introduced through git-lfs. An attacker could create a malicious repository which, after being cloned in SourceTree for Windows and enabled with git-lfs, is able to exploit this issue to gain code execution on the system...
git-lfs Remote Code Execution
/ Go PoC exploit for git-lfs - Remote Code Execution RCE vulnerability CVE-2020-27955 git-lfs-RCE-exploit-CVE-2020-27955.go Discovered by Dawid Golunski https://legalhackers.com https://exploitbox.io Affected RCE exploit: Git / GitHub CLI / GitHub Desktop / Visual Studio / GitKraken / SmartGit /...