CVE-2019-11582: Critical severity Atlassian Sourcetree Windows vulnerability
Published Jun 14, 2019
·Updated
An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI.
Affected Software
1 affected component
Atlassian Sourcetree Windows>=0.5a<3.1.3
Event History
Jun 14, 2019
CVE Published
via MITRE·01:54 PM
Data Sourced
via MITRE·01:54 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-11582?
CVE-2019-11582 has been rated as critical due to its potential for remote code execution.
2
How do I fix CVE-2019-11582?
To fix CVE-2019-11582, upgrade Atlassian Sourcetree to version 3.1.3 or later.
3
What versions are affected by CVE-2019-11582?
CVE-2019-11582 affects all versions of Atlassian Sourcetree for Windows prior to 3.1.3.
4
Can CVE-2019-11582 be exploited remotely?
Yes, CVE-2019-11582 can be exploited remotely through crafted URI handlers.
5
What types of attacks does CVE-2019-11582 enable?
CVE-2019-11582 enables attackers to execute arbitrary code on affected systems.