CVE-2018-5226 is a vulnerability in Atlassian Sourcetree
Published on April 25, 2018
There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. All versions of Sourcetree for Windows before 2.5.5.0 are affected by this vulnerability.
Products Associated with CVE-2018-5226
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-5226 are published in Atlassian Sourcetree:
Affected Versions
Atlassian SourceTree Windows:- Version unspecified and below 2.5.5.0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.