Vulnerabilities > Atlassian > Sourcetree > 1.4

DATE CVE VULNERABILITY TITLE RISK
2018-01-26 CVE-2017-14592 Command Injection vulnerability in Atlassian Sourcetree
Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling.
network
low complexity
atlassian CWE-77
critical
9.0
2017-05-04 CVE-2017-8768 OS Command Injection vulnerability in Atlassian Sourcetree
Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme.
network
low complexity
atlassian CWE-78
critical
10.0