VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 24, 2018· Updated Jun 17, 2026

CVE-2018-13385

CVE-2018-13385

Description

There was an argument injection vulnerability in Sourcetree for macOS via filenames in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for macOS is able to exploit this issue to gain code execution on the system. Versions of Sourcetree for macOS from 1.0b2 before 2.7.6 are affected by this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Atlassian/Sourcetreellm-fuzzy
    Range: >=1.0b2, <2.7.6
  • Atlassian/Sourcetree for macOSv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.