Command Injection (CVE-2017-8768)

SourceTree for Windows is affected by a command injection vulnerability in URI handling. The vulnerability can be triggered through a browser or the SourceTree interface. Affected versions: Versions of SourceTree for Windows starting with 0.8.4b before version 2.0.20.1 are affected by this...

CVE-2017-8768

CVE-2017-8768 affects Atlassian SourceTree v2.5c and earlier, with a command-injection flaw in the sourcetree:// URI handling that can trigger arbitrary OS commands when the URI contains substrings like sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext::. Multiple sources (SRCTREE-4738...

CVE-2017-8768

Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. It will lead to arbitrary OS command execution with a URL substring of sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext:: followed by the command. The Atlassian ID...