← CVE Intelligence

CVE-2018-13397

Atlassian / Sourcetree for Windows PUBLISHED

Description (CNA)

There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.

Affected (CNA)

Vendor / productVersions
Atlassian / Sourcetree for Windowsaffected 0.5.1.0 before unspecified; affected unspecified before 3.0.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.