CVE-2018-13396 is a vulnerability in Atlassian Sourcetree
Published on November 5, 2018
There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
Products Associated with CVE-2018-13396
Want to know whenever a new CVE is published for Atlassian Sourcetree? stack.watch will email you.
Affected Versions
Atlassian Sourcetree for macOS:- Version 1.0b2 and below unspecified is affected.
- Version unspecified and below 3.0.0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.