Vulnerabilities > Atlassian > Sourcetree > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-07-24 CVE-2018-13385 Argument Injection or Modification vulnerability in Atlassian Sourcetree
There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories.
network
low complexity
atlassian CWE-88
critical
 9.8
9.8
2017-05-04 CVE-2017-8768 OS Command Injection vulnerability in Atlassian Sourcetree
Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme.
network
low complexity
atlassian CWE-78
critical
 9.8
9.8