CVE-2018-20235 is a vulnerability in Atlassian Sourcetree
Published on March 8, 2019
There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.
Products Associated with CVE-2018-20235
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-20235 are published in Atlassian Sourcetree:
Affected Versions
Atlassian Sourcetree for Windows:- Version 0.5a and below unspecified is affected.
- Version unspecified and below 3.0.15 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.