CVE-2017-14593

Sourcetree for Windows is affected by CVE-2017-14593: multiple argument and command injection flaws in Mercurial and Git handling that can lead to arbitrary code execution. Vulnerable in versions starting at 0.5.1.0 up to (but not including) 2.4.7.0; from version 0.8.4b the issue can be triggered...