An argument injection vulnerability in Atlassian Sourcetree for Windows's URI handlers, in all versions prior to 3.1.3, allows remote attackers to gain remote code execution through the use of a crafted URI.
References
Link | Resource |
---|---|
https://jira.atlassian.com/browse/SRCTREEWIN-11917 | Vendor Advisory |
Configurations
Information
Published : 2019-06-14 07:29
Updated : 2019-06-17 08:25
NVD link : CVE-2019-11582
Mitre link : CVE-2019-11582
JSON object : View
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Products Affected
atlassian
- sourcetree