PT-2019-10027
CVE-2018-20234
·
Publicado
2019-03-08
·
Atualizado
2020-05-11
Descrição por
CVSS 2.0
9.0
AltaMétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Atlassian Sourcetree for macOS versions 1.2 through 3.1.1
Description:
The issue allows a remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS to exploit an argument injection vulnerability via filenames in Mercurial repositories, potentially gaining code execution on the system.
Recommendations:
For Atlassian Sourcetree for macOS versions 1.2 through 3.1.1, update to version 3.1.1 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾