cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-21697,https://securityvulnerability.io/vulnerability/CVE-2024-21697,"{""{\""text\"":\""High Sev RCE Vulnerability Affects Sourcetree for Mac and Windows\"",\""icon\"":\""⚠️\""}"",""{\""text\"":\""Upgrade to Latest Version to Mitigate Risk\"",\""icon\"":\""🔄\""}""}","A Remote Code Execution vulnerability exists in Sourcetree versions 4.2.8 for Mac and 3.4.19 for Windows, which enables an unauthenticated attacker to execute arbitrary code on the affected systems. This vulnerability has substantial implications, as it significantly compromises the confidentiality, integrity, and availability of the affected products. User interaction is required, which increases the risk of exploitation in environments where users may unknowingly initiate the attack vector. Atlassian strongly advises all users to upgrade to patched versions: Sourcetree for Mac should be updated to version 4.2.9 or higher, while Sourcetree for Windows should be updated to version 3.4.20 or higher to mitigate potential risks.",Atlassian,"Sourcetree For Mac,Sourcetree For Windows",8.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-11-19T19:00:00.635Z,0
CVE-2019-11582,https://securityvulnerability.io/vulnerability/CVE-2019-11582,,"An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI.",Atlassian,Sourcetree For Windows,8.8,HIGH,0.002839999971911311,false,false,false,false,,false,false,2019-06-14T14:29:00.000Z,0
CVE-2018-20235,https://securityvulnerability.io/vulnerability/CVE-2018-20235,,There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.,Atlassian,Sourcetree For Windows,8.8,HIGH,0.00761000020429492,false,false,false,false,,false,false,2019-03-08T18:29:00.000Z,0
CVE-2018-20236,https://securityvulnerability.io/vulnerability/CVE-2018-20236,,There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.,Atlassian,Sourcetree For Windows,8.8,HIGH,0.015359999611973763,false,false,false,false,,false,false,2019-03-08T18:29:00.000Z,0
CVE-2018-13397,https://securityvulnerability.io/vulnerability/CVE-2018-13397,,There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.,Atlassian,Sourcetree For Windows,8.8,HIGH,0.0008500000112690032,false,false,false,false,,false,false,2018-11-05T22:29:00.000Z,0
CVE-2018-13386,https://securityvulnerability.io/vulnerability/CVE-2018-13386,,There was an argument injection vulnerability in Sourcetree for Windows via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. Versions of Sourcetree for Windows before version 2.6.9 are affected by this vulnerability.,Atlassian,Sourcetree For Windows,8.1,HIGH,0.0018599999602884054,false,false,false,false,,false,false,2018-07-24T13:29:00.000Z,0
CVE-2018-5226,https://securityvulnerability.io/vulnerability/CVE-2018-5226,,There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An attacker with permission to create a tag on a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. All versions of Sourcetree for Windows before 2.5.5.0 are affected by this vulnerability.,Atlassian,Sourcetree Windows,8.8,HIGH,0.0010100000072270632,false,false,false,false,,false,false,2018-04-25T00:00:00.000Z,0
CVE-2017-14593,https://securityvulnerability.io/vulnerability/CVE-2017-14593,,"Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. From version 0.8.4b of Sourcetree for Windows, this vulnerability can be triggered from a webpage through the use of the Sourcetree URI handler. Versions of Sourcetree for Windows starting with 0.5.1.0 before version 2.4.7.0 are affected by this vulnerability",Atlassian,Sourcetree For Windows,8.8,HIGH,0.00267999991774559,false,false,false,false,,false,false,2018-01-26T02:29:00.000Z,0