[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fI7fosDcupPC7xodppDOsBz5JR3sDAQvspjiD3stSGqc":3,"g5a-risk:CVE-2018-20235":116},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":70,"weaknesses":71,"weaknessesCount":48,"isActivelyExploited":75,"cisaInfo":15,"otxData":15,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":112,"notableEvents":113},"CVE-2018-20235","What is CVE-2018-20235?","There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial repositories. A remote attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to gain code execution on the system.","There was an argument injection vulnerability in Atlassian Sourcetree for Windows from version 0.5a before version 3.0.15 via filenames in Mercurial reposito...","2019-03-08T18:29:00.273","2019-10-03T00:03:26.223",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C","SINGLE","COMPLETE",9,8,10,0.06686,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"atlassian","sourcetree","*","cpe:2.3:a:atlassian:sourcetree:*:*:*:*:*:windows:*:*",1,[50,54,60,66],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F152173\u002FSourcetree-Git-Arbitrary-Code-Execution-URL-Handling.html","Packetstormsecurity",[],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F107407","Securityfocus",[58,59],"Third Party Advisory","VDB Entry",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fjira.atlassian.com\u002Fbrowse\u002FSRCTREEWIN-11289","Atlassian",[64,65],"Issue Tracking","Vendor Advisory",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FMar\u002F30","Seclists",[],4,[72],{"id":73,"name":73,"description":74},"Unknown","NVD-CWE-noinfo",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2018-20235? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-20235, a high severity cyber security vulnerability from 2019. There was an argument injection vulnerability in Atlassian ...","CVE-2018-20235, CVE-2018-20235 vulnerability, CVE-2018-20235 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, atlassian security, sourcetree vulnerability","\u002Fwhat-is\u002Fcve-2018-20235",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-20235","Cybersecurity","CVE-2018-20235, CVE-2018-20235 vulnerability, CVE-2018-20235 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":15,"Negate":15,"Nodes":104},[105],{"Operator":106,"Negate":15,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":109,"VersionStartExcluding":15,"VersionStartIncluding":110,"VersionEndExcluding":111,"VersionEndIncluding":15},"A85EE0E7-CDE1-43CA-9F46-3A5DE4378F71","0.5a","3.0.15",[],[],{"lastModified":11,"cacheTime":115,"version":32},1792453342176,{"score":117,"band":118,"action":119,"scoredAt":120},49,"Medium","Plan remediation","2026-10-19T06:59:16.14765+00:00"]