CVE-2018-20236: Command Injection
Published Mar 8, 2019
·Updated
There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.
Affected Software
1 affected component
Atlassian Sourcetree Windows>=0.5a<3.0.10
Event History
Mar 8, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-20236?
CVE-2018-20236 has been rated as critical due to its potential for remote code execution.
2
How do I fix CVE-2018-20236?
To mitigate CVE-2018-20236, users should update Sourcetree for Windows to version 3.0.10 or later.
3
Who is affected by CVE-2018-20236?
CVE-2018-20236 affects all users of Sourcetree for Windows from version 0.5a up to version 3.0.9.
4
What type of vulnerability is CVE-2018-20236?
CVE-2018-20236 is classified as a command injection vulnerability.
5
Can CVE-2018-20236 lead to unauthorized access?
Yes, CVE-2018-20236 can allow a remote attacker to execute arbitrary code, potentially leading to unauthorized access.