Описание
There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.
Ссылки
- Third Party AdvisoryVDB Entry
- Issue TrackingVendor Advisory
- Third Party AdvisoryVDB Entry
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.5a (включая) до 3.0.10 (исключая)
cpe:2.3:a:atlassian:sourcetree:*:*:*:*:*:windows:*:*
EPSS
Процентиль: 85%
0.02361
Низкий
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 8.8
github
больше 3 лет назад
There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.
EPSS
Процентиль: 85%
0.02361
Низкий
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-77