CVE-2019-11582

8.8 highEPSS 4.9%

High (8.8) in atlassian sourcetree. EPSS 4.9% chance of exploitation in the next 30 days.

An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 4.9% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-88
Published: 2019-06-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:sourcetree

References

https://jira.atlassian.com/browse/SRCTREEWIN-11917
https://jira.atlassian.com/browse/SRCTREEWIN-11917

Check your stack JSON