CVE-2026-21575: Improper Control of Generation of Code

This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to execute arbitrary code which has high impact to...

EUVD-2017-6094

Malware in sbrugna...

CVE-2024-21697

This High severity RCE Remote Code Execution vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has...

CVE-2024-21697: Undefined Security Weakness

This High severity RCE Remote Code Execution vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has...

RCE via git-lfs in Sourcetree for Windows - CVE-2021-21237

There was an argument injection vulnerability in SourceTree for Windows introduced through git-lfs. An attacker could create a malicious repository which, after being cloned in SourceTree for Windows and enabled with git-lfs, is able to exploit this issue to gain code execution on the system. Thi...

RCE via git-lfs in Sourcetree for Windows - CVE-2021-21237

There was an argument injection vulnerability in SourceTree for Windows introduced through git-lfs. An attacker could create a malicious repository which, after being cloned in SourceTree for Windows and enabled with git-lfs, is able to exploit this issue to gain code execution on the system. Thi...

RCE via git-lfs in Sourcetree for Windows - CVE-2020-27955

There was an argument injection vulnerability in SourceTree for Windows introduced through git-lfs. An attacker could create a malicious repository which, after being cloned in SourceTree for Windows and enabled with git-lfs, is able to exploit this issue to gain code execution on the system...

PT-2019-12392

Name of the Vulnerable Software and Affected Versions Atlassian Sourcetree for Windows versions prior to 3.1.3 Description The issue allows remote attackers to gain remote code execution through the use of a crafted URI, due to an argument injection vulnerability in Atlassian Sourcetree for...

PT-2019-10029

Name of the Vulnerable Software and Affected Versions: Sourcetree for Windows versions 0.5a through 3.0.9 Description: A command injection issue exists via URI handling, allowing a remote attacker to send a malicious URI to a victim using Sourcetree for Windows, potentially leading to code...

PT-2019-10028

Name of the Vulnerable Software and Affected Versions: Atlassian Sourcetree for Windows versions 0.5a through 3.0.14 Description: The issue allows a remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows to exploit an argument injection vulnerability...

CVE-2018-20236: Improper Neutralization of Special Elements used in a Command

There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system...

Argument Injection via Mercurial hooks in Sourcetree for Windows - CVE-2018-20235

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. h4. Affected...

PT-2018-11799

Name of the Vulnerable Software and Affected Versions Sourcetree for Windows versions 0.5.1.0 through 2.x Description The issue allows an attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows to exploit an argument injection vulnerability via Git...

CVE-2018-13397: Undefined Security Weakness

There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to ga...

Atlassian Sourcetree for Windows Parameter Injection Vulnerability

Atlassian Sourcetree for Windows is a free Windows-based Git and Mercurial client tool from Atlassian Australia that manages repositories using a visual interface. A parameter injection vulnerability exists in Sourcetree for Windows. The vulnerability can be exploited by an attacker to execute co...

CVE-2018-13386: Improper Neutralization of Argument Delimiters in a Command

There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. Versions of...

PT-2018-11787

Name of the Vulnerable Software and Affected Versions Sourcetree for Windows versions prior to 2.6.9 Description The issue allows an attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows to exploit an argument injection vulnerability via filenames in these...

CVE-2018-5226: Undefined Security Weakness

There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the...

PT-2018-16817

Name of the Vulnerable Software and Affected Versions Sourcetree for Windows versions prior to 2.5.5.0 Description The issue allows an attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows to exploit an argument injection vulnerability. This can lead ...

PT-2018-5685

Name of the Vulnerable Software and Affected Versions: Sourcetree for Windows versions 0.5.1.0 through 2.4.7.0 excluding 2.4.7.0 Description: The issue affects the handling of Mercurial and Git repositories in Sourcetree for Windows, allowing an attacker with commit permission to a linked...