cve.bz

CVE-2018-20236

8.8 highEPSS 6.4%

High (8.8) in atlassian sourcetree. EPSS 6.4% chance of exploitation in the next 30 days.

There was an command injection vulnerability in Sourcetree for Windows from version 0.5a before version 3.0.10 via URI handling. A remote attacker could send a malicious URI to a victim using Sourcetree for Windows to exploit this issue to gain code execution on the system.

Severity

CVSS 3.0

8.8 high
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
6.4% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE
CWE-77
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON