CVE-2018-13397: Critical severity Atlassian Sourcetree Windows vulnerability
There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-13397?
The severity of CVE-2018-13397 is considered high due to the potential for remote code execution.
How do I fix CVE-2018-13397?
To fix CVE-2018-13397, users should upgrade to version 3.0.0 or later of Atlassian Sourcetree for Windows.
Who is affected by CVE-2018-13397?
CVE-2018-13397 affects users of Atlassian Sourcetree for Windows between versions 0.5.1.0 and 3.0.0.
What causes CVE-2018-13397?
CVE-2018-13397 is caused by an argument injection vulnerability related to Git subrepositories in Mercurial repositories.
Can CVE-2018-13397 be exploited remotely?
Yes, CVE-2018-13397 can be exploited remotely by attackers with permission to commit to the targeted Mercurial repository.