ID CVE-2018-20235
Summary There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.
References
Vulnerable Configurations
  • cpe:2.3:a:atlassian:sourcetree:0.5a:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.5a:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.6.0.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.6.0.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.6.5.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.6.5.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.0.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.0.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.1.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.1.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.5.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.5.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.5.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.5.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.5.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.5.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.5.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.5.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.5.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.5.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.5.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.5.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.7.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.7.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.8.0:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.8.0:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.8.1:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.8.1:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.8.2:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.8.2:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.8.3:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.8.3:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.8.4:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.8.4:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.8.5.1:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.8.5.1:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.0:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.0:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.0.1:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.0.1:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.0.2:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.0.2:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.0.3:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.0.3:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.0.4:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.0.4:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.0.5:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.0.5:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.0.6:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.0.6:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.1.0:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.1.0:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.1.1:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.1.1:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.1.2:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.1.2:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.2:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.2:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.2.1:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.2.1:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.2.2:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.2.2:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.2.3:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.2.3:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.3:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.3:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:0.9.4:beta:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:0.9.4:beta:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0.7:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0.7:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.0.8:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.0.8:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.1.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.1.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.1.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.1.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.2.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.2.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.2.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.2.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.2.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.2.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.2.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.2.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.2.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.2.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.3.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.3.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.3.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.3.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.3.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.3.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.4.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.4.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.5.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.5.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.5.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.5.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.5.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.5.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.7:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.7:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.8:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.8:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.9:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.9:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.10:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.10:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.11:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.11:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.12:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.12:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.13:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.13:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.14:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.14:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.15:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.15:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.16:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.16:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.17:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.17:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.18:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.18:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.19:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.19:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.20:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.20:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.21:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.21:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.22:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.22:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.23:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.23:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.24:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.24:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.6.25:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.6.25:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.7.0.32509:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.7.0.32509:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.0.36401:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.0.36401:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.7:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.7:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.8:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.8:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.9:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.9:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.10:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.10:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.2.11:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.2.11:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.8.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.8.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.6.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.6.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.6.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.6.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.7:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.7:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.9.20:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.9.20:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.10.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.10.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.10.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.10.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.13.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.13.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.13.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.13.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.9.13.7:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.9.13.7:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.15.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.15.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.15.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.15.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.15.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.15.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.17.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.17.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.18.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.18.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.19.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.19.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.20.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.20.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.21.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.21.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.22.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.22.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.23.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.23.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:1.10.24.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:1.10.24.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.6.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.6.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.6.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.6.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.7.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.7.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.8.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.8.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.9.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.9.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.10.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.10.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.11.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.11.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.12.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.12.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.13.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.13.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.14.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.14.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.15.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.15.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.16.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.16.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.17.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.17.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.18.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.18.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.19.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.19.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.0.20.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.0.20.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.0.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.0.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.1.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.1.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.1.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.1.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.2.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.2.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.2.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.2.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.2.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.2.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.2.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.2.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.3.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.3.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.4.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.4.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.5.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.5.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.6.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.6.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.7.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.7.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.8.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.8.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.9.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.9.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.10.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.10.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.1.11.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.1.11.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.2.0.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.2.0.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.2.1.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.2.1.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.2.2.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.2.2.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.2.3.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.2.3.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.2.4.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.2.4.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.3.0.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.3.0.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.3.1.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.3.1.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.3.2.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.3.2.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.3.3.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.3.3.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.3.4.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.3.4.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.3.5.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.3.5.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.0.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.0.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.1.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.1.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.2.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.2.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.3.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.3.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.4.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.4.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.5.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.5.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.6.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.6.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.7.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.7.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.4.8.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.4.8.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.5.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.5.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.5.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.5.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.5.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.5.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.5.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.5.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.5.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.5.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.5.5.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.5.5.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.5.5.0:*:*:*:enterprise:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.5.5.0:*:*:*:enterprise:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.7:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.7:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.8:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.8:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.9:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.9:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.9:*:*:*:enterprise:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.9:*:*:*:enterprise:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.9.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.9.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.10:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.10:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.6.10.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.6.10.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.7:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.7:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.7.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.7.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.7.2:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.7.2:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.7.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.7.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.7.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.7.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.7.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.7.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:2.7.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:2.7.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.1:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.1:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.3:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.3:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.4:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.4:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.5:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.5:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.6:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.6:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.7:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.7:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.8:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.8:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.9:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.9:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.10:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.10:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.11:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.11:*:*:*:*:windows:*:*
  • cpe:2.3:a:atlassian:sourcetree:3.0.12:*:*:*:*:windows:*:*
    cpe:2.3:a:atlassian:sourcetree:3.0.12:*:*:*:*:windows:*:*
CVSS
Base: 9.0 (as of 03-10-2019 - 00:03)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:S/C:C/I:C/A:C
refmap via4
bid 107407
bugtraq 20190320 March 2019 Sourcetree Advisory - Multiple Remote Code Execution Vulnerabilities
confirm https://jira.atlassian.com/browse/SRCTREEWIN-11289
misc http://packetstormsecurity.com/files/152173/Sourcetree-Git-Arbitrary-Code-Execution-URL-Handling.html
Last major update 03-10-2019 - 00:03
Published 08-03-2019 - 18:29
Last modified 03-10-2019 - 00:03
Back to Top