Approved changes feed: RSS · Atom

cpe:2.3:a:atlassian:sourcetree:1.0:beta3:*:*:*:macos:*:*

part: a version: 1.0 update: beta3

VendorAtlassian (8acde0d4-2b83-5bd8-8d3f-60d59e0b022e)
ProductSourcetree (f2648a82-7492-51e1-867b-6c04ae4ba4d2)
Edition*
Language*
Software edition*
Target softwaremacos
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-13396 vulnerable 2026-06-03 14:38:10.521615 Details available
There was an argument injection vulnerability in Sourcetree for macOS from version 1.0b2 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system.
Published: 2018-11-05T22:00:00.000Z
Updated: 2024-09-16T21:03:34.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13385 vulnerable 2026-06-03 14:38:10.507831 Details available
There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. Versions of Sourcetree for macOS from 1.0b2 before 2.7.6 are affected by this vulnerability.
Published: 2018-07-24T13:00:00.000Z
Updated: 2024-09-16T22:08:24.595Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14592 vulnerable 2026-06-03 14:36:39.442659 Details available
Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. From version 1.4.0 of Sourcetree for macOS, this vulnerability can be triggered from a webpage through the use of the Sourcetree URI handler. Versions of Sourcetree for macOS starting with 1.0b2 before version 2.7.0 are affected by this vulnerability.
Published: 2018-01-26T02:00:00.000Z
Updated: 2024-09-16T22:09:36.844Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.