CVE-2018-13396

CVE-2018-13396: vulnerability in Atlassian Sourcetree for macOS

Published · Updated

Follow this CVE+ Monitor Sourcetree

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.9%
There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
Affected products
Atlassian · Sourcetree for macOS
Related CVEs — Atlassian Sourcetree for macOS

In the same product, most dangerous first.

CVE-2018-20234—CVE-2018-20234EPSS 5.9%CVE-2017-14592—CVE-2017-14592EPSS 5.5%CVE-2018-13385—CVE-2018-13385EPSS 2.2%