Sourcetree For Mac
Monthly
Remote code execution in Atlassian Sourcetree for Mac and Windows (Git desktop client) lets an attacker run arbitrary code on a developer's workstation with full impact to confidentiality, integrity, and availability. The flaw was introduced in version 3.4.11 and requires the victim to interact with attacker-controlled content, making a malicious repository the likely trigger. It carries a CVSS 3.0 score of 7.1; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but it was found and responsibly disclosed through Atlassian's Bug Bounty program.
Remote code execution in Atlassian Sourcetree for Mac and Windows (Git desktop client) lets an attacker run arbitrary code on a developer's workstation with full impact to confidentiality, integrity, and availability. The flaw was introduced in version 3.4.11 and requires the victim to interact with attacker-controlled content, making a malicious repository the likely trigger. It carries a CVSS 3.0 score of 7.1; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, but it was found and responsibly disclosed through Atlassian's Bug Bounty program.