CVE-2018-13397

CVE-2018-13397: vulnerability in Atlassian Sourcetree for Windows

Published · Updated

Follow this CVE+ Monitor Sourcetree

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.9%
There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.
Affected products
Atlassian · Sourcetree for Windows
Related CVEs — Atlassian Sourcetree for Windows

In the same product, most dangerous first.

CVE-2018-20235—CVE-2018-20235EPSS 6.7%CVE-2018-20236—CVE-2018-20236EPSS 6.4%CVE-2017-14593—CVE-2017-14593EPSS 5.5%CVE-2019-11582—CVE-2019-11582EPSS 4.9%CVE-2018-13386—CVE-2018-13386EPSS 1.6%CVE-2024-21697HIGHCVE-2024-21697EPSS 0.8%