{"{\"text\":\"High Sev RCE Vulnerability Affects Sourcetree for Mac and Windows\",\"icon\":\"⚠️\"}","{\"text\":\"Upgrade to Latest Version to Mitigate Risk\",\"icon\":\"🔄\"}"}

CVE-2024-21697

Summary

A Remote Code Execution vulnerability exists in Sourcetree versions 4.2.8 for Mac and 3.4.19 for Windows, which enables an unauthenticated attacker to execute arbitrary code on the affected systems. This vulnerability has substantial implications, as it significantly compromises the confidentiality, integrity, and availability of the affected products. User interaction is required, which increases the risk of exploitation in environments where users may unknowingly initiate the attack vector. Atlassian strongly advises all users to upgrade to patched versions: Sourcetree for Mac should be updated to version 4.2.9 or higher, while Sourcetree for Windows should be updated to version 3.4.20 or higher to mitigate potential risks.

References