Atlassian SourceTree CVE-2018-20235 Arbitrary Code Execution Vulnerability
BID:107407
CVE-2018-20235 |Info
Atlassian SourceTree CVE-2018-20235 Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 107407 |
| Class: | Unknown |
| CVE: |
CVE-2018-20235 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 08 2019 12:00AM |
| Updated: | Mar 08 2019 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Atlassian SourceTree 3.0.12 Atlassian SourceTree 3.0.10 Atlassian SourceTree 3.0.8 Atlassian SourceTree 2.5.1 Atlassian SourceTree 2.5 Atlassian SourceTree 1.5 Atlassian SourceTree 1.4 Atlassian SourceTree 1.1 Atlassian SourceTree 2.6.10.0 Atlassian SourceTree 2.5C Atlassian SourceTree 2.0.20.1 Atlassian SourceTree 2.0.20.0 Atlassian SourceTree 1.9.13.7 Atlassian SourceTree 1.7.0.32509 Atlassian SourceTree 1.6 Atlassian SourceTree 1.3 Atlassian SourceTree 1.0 Atlassian SourceTree 0.8.4b Atlassian SourceTree 0.5a Atlassian SourceTree 0.5.2.0 |
| Not Vulnerable: |
Atlassian SourceTree 3.0.15 |
Discussion
Atlassian SourceTree CVE-2018-20235 Arbitrary Code Execution Vulnerability
Atlassian SourceTree is prone to an arbitrary code-execution vulnerability.
Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected system. Failed exploit attempts may cause a denial-of-service condition.
Versions prior to Sourcetree 3.0.15 are vulnerable.
Atlassian SourceTree is prone to an arbitrary code-execution vulnerability.
Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the affected system. Failed exploit attempts may cause a denial-of-service condition.
Versions prior to Sourcetree 3.0.15 are vulnerable.
Exploit / POC
Atlassian SourceTree CVE-2018-20235 Arbitrary Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Atlassian SourceTree CVE-2018-20235 Arbitrary Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Atlassian SourceTree CVE-2018-20235 Arbitrary Code Execution Vulnerability
References:
References: