Argument Injection Vulnerability in Sourcetree for macOS by Atlassian

CVE-2018-13396

Summary

An argument injection vulnerability exists in Sourcetree for macOS that could allow an attacker with commit privileges to a linked Mercurial repository to execute arbitrary code on the target system. This can occur through the manipulation of Git subrepositories, which can be exploited by malicious actors to compromise the integrity and security of the user's environment. Proper access controls and validation mechanisms are essential to mitigate the risk associated with this vulnerability.

References