Argument Injection Vulnerability in Sourcetree for Windows by Atlassian

CVE-2018-13386

What is CVE-2018-13386?

An argument injection vulnerability exists in Sourcetree for Windows due to mishandling of filenames in Mercurial repositories. If an attacker has permissions to commit to a Mercurial repository linked in the application, they can exploit this weakness to execute arbitrary code on the victim's system. Users of versions prior to 2.6.9 are particularly at risk and should consider upgrading to ensure their systems remain secure.

References