• Type: Bug
• Resolution: Fixed
• Priority: Low
• Fix Version/s: 3.1.1
• Affects Version/s: 3.0.1
• Component/s: None
• Labels:

  • CVE-2018-17456
  • advisory
  • advisory-released
  • bugbounty
  • cvss-critical
  • input-validation
  • security

[SRCTREE-6394] Input validation vulnerability via Git in Sourcetree for Mac - CVE-2018-17456

Eric Franklin (Inactive) made changes - 13/Dec/2023 5:37 PM

Remote Link

New: This issue links to "Page (Confluence)" [ 847672 ]

Eric Franklin (Inactive) made changes - 08/Dec/2023 8:28 PM

Remote Link

New: This issue links to "Page (Confluence)" [ 846159 ]

Monique Khairuliana (Inactive) made changes - 30/Sep/2019 4:13 AM

Workflow

Original: JAC Bug Workflow v3 [ 3372947 ]

New: SRCTREE JAC Bug Workflow [ 3738087 ]

Monique Khairuliana (Inactive) made changes - 16/Aug/2019 1:01 AM

Workflow

Original: SourceTree Bug Workflow [ 3089798 ]

New: JAC Bug Workflow v3 [ 3372947 ]

David Black made changes - 21/Mar/2019 1:53 AM

Link

New: This issue is detailed by SRCTREE-6297 [ SRCTREE-6297 ]

David Black made changes - 07/Mar/2019 12:38 AM

Labels

Original: CVE-2018-17456 advisory advisory-to-release bugbounty cvss-critical input-validation security

New: CVE-2018-17456 advisory advisory-released bugbounty cvss-critical input-validation security

Erin Jensby made changes - 07/Mar/2019 12:36 AM

Security

Original: Atlassian Staff [ 10750 ]

Erin Jensby made changes - 06/Mar/2019 6:00 PM

Description

Original: There was an input validation vulnerability in Sourcetree for macOS via a Git repository with submodules. A remote attacker with permission to commit to a Git repository linked in Sourcetree for macOS is able to able to exploit this issue to gain code execution on the system. h4. Affected versions:  * Versions of Sourcetree for macOS before version 3.1.1 are affected by this vulnerability h4. Fix:  * Upgrade Sourcetree for macOS to version 3.1.1 or higher from [https://www.sourcetreeapp.com/] For additional details, see the full advisory <insert CAC page>.

New: There was an input validation vulnerability in Sourcetree for macOS via a Git repository with submodules. A remote attacker with permission to commit to a Git repository linked in Sourcetree for macOS is able to able to exploit this issue to gain code execution on the system. h4. Affected versions:  * Versions of Sourcetree for macOS before version 3.1.1 are affected by this vulnerability h4. Fix:  * Upgrade Sourcetree for macOS to version 3.1.1 or higher from [https://www.sourcetreeapp.com/] For additional details, see the full advisory: https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2019-03-06-966678691.html

Erin Jensby made changes - 06/Mar/2019 5:54 PM

Fix Version/s

New: 3.1.1 [ 85794 ]

AB made changes - 21/Feb/2019 11:08 PM

Remote Link

Original: This issue links to "Page (Confluence)" [ 410422 ]

Load more older events