CVE-2018-20236

There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling

published March 8, 2019

CVSS
—
EPSS
6%
Percentile
93.7
In the wild
Unconfirmed
What it is

There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06440 · 93.7th percentile
Published
2019-03-08T18:00Z
EPSS history
Timeline
  • 08 MAR 18:00Z
    There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling
    cvelistv5