• Type: Bug
• Resolution: Fixed
• Priority: Low
• Fix Version/s: 3.0.10
• Affects Version/s: 3.0.9
• Component/s: None
• Labels:

  • CVE-2018-20236
  • advisory
  • advisory-released
  • bugbounty
  • command-injection
  • cvss-critical
  • security

[SRCTREEWIN-11291] Command Injection via URI handling in Sourcetree for Windows - CVE-2018-20236

Eric Franklin (Inactive) made changes - 13/Dec/2023 5:37 PM

Remote Link

New: This issue links to "Page (Confluence)" [ 847669 ]

Eric Franklin (Inactive) made changes - 08/Dec/2023 8:28 PM

Remote Link

New: This issue links to "Page (Confluence)" [ 846155 ]

Monique Khairuliana (Inactive) made changes - 30/Sep/2019 4:23 AM

Workflow

Original: JAC Bug Workflow v3 [ 3453121 ]

New: SRCTREE JAC Bug Workflow [ 3745030 ]

Monique Khairuliana (Inactive) made changes - 26/Aug/2019 5:14 AM

Workflow

Original: SourceTree Bug Workflow [ 3089791 ]

New: JAC Bug Workflow v3 [ 3453121 ]

David Black made changes - 07/Mar/2019 12:38 AM

Labels

Original: CVE-2018-20236 advisory advisory-to-release bugbounty command-injection cvss-critical security

New: CVE-2018-20236 advisory advisory-released bugbounty command-injection cvss-critical security

Erin Jensby made changes - 07/Mar/2019 12:36 AM

Security

Original: Atlassian Staff [ 10750 ]

Erin Jensby made changes - 06/Mar/2019 5:59 PM

Description

Original: There was an command injection vulnerability in Sourcetree for Windows via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system. h4. Affected versions:  * Versions of Sourcetree for Windows before version 3.0.10 are affected by this vulnerability h4. Fix:  * Upgrade Sourcetree for Windows to version 3.0.10 or higher from [https://www.sourcetreeapp.com/] For additional details see the full advisory. <CAC page here>

New: There was an command injection vulnerability in Sourcetree for Windows via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system. h4. Affected versions:  * Versions of Sourcetree for Windows before version 3.0.10 are affected by this vulnerability h4. Fix:  * Upgrade Sourcetree for Windows to version 3.0.10 or higher from [https://www.sourcetreeapp.com/] For additional details see the full advisory: https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2019-03-06-966678691.html

AB made changes - 21/Feb/2019 11:08 PM

Remote Link

Original: This issue links to "Page (Confluence)" [ 410421 ]

Clement made changes - 20/Feb/2019 11:18 PM

Remote Link

New: This issue links to "Page (Confluence)" [ 412621 ]

AB made changes - 12/Feb/2019 5:05 AM

Remote Link

New: This issue links to "Page (Confluence)" [ 410421 ]

Load more older events