Argument Injection Vulnerability in Sourcetree for Windows by Atlassian

CVE-2018-13397

Summary

An argument injection vulnerability exists in Sourcetree for Windows, affecting versions from 0.5.1.0 up to but not including 3.0.0. This vulnerability can be exploited by an attacker who has permission to commit to a linked Mercurial repository. By strategically crafting malicious arguments within the repository, the attacker may execute arbitrary code on the victim's system, posing a significant risk to users' systems and data integrity if the vulnerability is not addressed.

References