High severity8.8NVD Advisory· Published Jan 26, 2018· Updated Jun 17, 2026
CVE-2017-14593
CVE-2017-14593
Description
Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system. From version 0.8.4b of Sourcetree for Windows, this vulnerability can be triggered from a webpage through the use of the Sourcetree URI handler. Versions of Sourcetree for Windows starting with 0.5.1.0 before version 2.4.7.0 are affected by this vulnerability
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2>=0.5.1.0 <2.4.7.0+ 1 more
- (no CPE)range: >=0.5.1.0 <2.4.7.0
- (no CPE)range: Versions starting with 0.5.1.0 before version 2.4.7.0
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/102926nvdThird Party AdvisoryVDB Entry
- confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.htmlnvdThird Party Advisory
- jira.atlassian.com/browse/SRCTREEWIN-8256nvdThird Party Advisory
News mentions
0No linked articles in our index yet.