9

CVE-2018-13396

EPSS 1.95%
Veröffentlicht 05.11.2018 22:29:00
Zuletzt bearbeitet 21.11.2024 03:47:01
Erkennungen
Login

There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Atlassian ≫ Sourcetree SwPlatform mac_os_x Version >= 1.0 < 3.0.0

Atlassian ≫ Sourcetree Version 1.0 Update beta2 SwPlatform macos

Atlassian ≫ Sourcetree Version 1.0 Update beta3 SwPlatform macos

Atlassian ≫ Sourcetree Version 1.0 Update beta4 SwPlatform macos

Atlassian ≫ Sourcetree Version 1.0 Update beta5 SwPlatform macos

Atlassian ≫ Sourcetree Version 1.0 Update rc1 SwPlatform macos

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.95%	0.776

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://jira.atlassian.com/browse/SRCTREE-5985

Vendor Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2018-13396

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-13396

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-13396

EUVD