CVE-2017-8768

CVE-2017-8768 affects Atlassian SourceTree v2.5c and earlier, with a command-injection flaw in the sourcetree:// URI handling that can trigger arbitrary OS commands when the URI contains substrings like sourcetree://cloneRepo/ext:: or sourcetree://checkoutRef/ext::. Multiple sources (SRCTREE-4738...