Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4rhr-pw6c-jrf4

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.

There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.

EPSS

Процентиль: 88%
0.0415
Низкий

8.8 High

CVSS3

Дефекты

CWE-88

Связанные уязвимости

CVSS3: 8.8
nvd
почти 7 лет назад

There was an argument injection vulnerability in Atlassian Sourcetree for macOS from version 1.2 before version 3.1.1 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.

EPSS

Процентиль: 88%
0.0415
Низкий

8.8 High

CVSS3

Дефекты

CWE-88