Uploaded image for project: 'Sourcetree for Windows'
  1. Sourcetree for Windows
  2. SRCTREEWIN-7161

Command Injection (CVE-2017-8768)

XMLWordPrintable

    • Severity 1 - Critical

      SourceTree for Windows is affected by a command injection vulnerability in URI handling. The vulnerability can be triggered through a browser or the SourceTree interface.

      Affected versions:

      • Versions of SourceTree for Windows starting with 0.8.4b before version 2.0.20.1 are affected by this vulnerability.

      Fix:

      Acknowledgements
      We would like to credit Yu Hong for reporting this issue to us.

      For additional details see the full advisory.

        1. SourceTree.png
          38 kB
        2. image-2017-05-11-13-35-57-752.png
          38 kB
        3. image-2017-05-11-13-35-04-810.png
          12 kB

            [SRCTREEWIN-7161] Command Injection (CVE-2017-8768)

            Alberto T Gomez made changes -
            Link Original: This issue is related to SRCTREE-4738 [ SRCTREE-4738 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: JAC Bug Workflow v3 [ 3450615 ] New: SRCTREE JAC Bug Workflow [ 3738998 ]
            Monique Khairuliana (Inactive) made changes -
            Workflow Original: SourceTree Bug Workflow [ 2015636 ] New: JAC Bug Workflow v3 [ 3450615 ]
            Matt Hart (Inactive) made changes -
            Labels Original: CVE-2017-8768 advisory cvss-critical security New: CVE-2017-8768 advisory security
            Matt Hart (Inactive) made changes -
            Labels Original: CVE-2017-8768 advisory security New: CVE-2017-8768 advisory cvss-critical security
            Tim Wylie made changes -
            Attachment New: SourceTree.png [ 281013 ]
            Adam Gaca made changes -
            Attachment New: image-2017-05-11-13-35-57-752.png [ 280985 ]
            Adam Gaca made changes -
            Attachment New: image-2017-05-11-13-35-04-810.png [ 280984 ]
            David Black made changes -
            Remote Link Original: This issue links to "Page (Extranet)" [ 287055 ]
            Alek Amrani (Inactive) made changes -
            Security Original: Atlassian Staff [ 10750 ]

              Unassigned Unassigned
              aminozhenko alexmin (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              15 Start watching this issue

                Created:
                Updated:
                Resolved: