FeedlyFeedly
CVEsCVEs
Threat IntelligenceThreat Intelligence
Threat IntelligenceThreat Intelligence
Log in
ChangelogChangelog
ChangelogChangelog
Log in
Log in
Start Free Trial
Start Free Trial
FeedlyFeedly
CVEsCVEs
Threat IntelligenceThreat Intelligence
Threat IntelligenceThreat Intelligence
Log in
ChangelogChangelog
ChangelogChangelog
Log in
Log in
Start Free Trial
Start Free Trial

CVE-2024-21697
Published: Nov 19, 2024 / Updated: 9h ago

010
High Severity
(Estimated)
No EPSS yet
CVE info copied to clipboard

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires user interaction. Atlassian recommends that Sourcetree for Mac and Sourcetree for Windows customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Sourcetree for Mac 4.2: Upgrade to a release greater than or equal to 4.2.9 Sourcetree for Windows 3.4: Upgrade to a release greater than or equal to 3.4.20 See the release notes ([https://www.sourcetreeapp.com/download-archives]). You can download the latest version of Sourcetree for Mac and Sourcetree for Windows from the download center ([https://www.sourcetreeapp.com/download-archives]). This vulnerability was reported via our Penetration Testing program.

Timeline

CVE Assignment

NVD published the first details for CVE-2024-21697

Nov 19, 2024 at 7:15 PM
First Article

Feedly found the first article mentioning CVE-2024-21697. See article

Nov 19, 2024 at 7:21 PM / National Vulnerability Database
CVSS Estimate

Feedly estimated the CVSS score as HIGH

Nov 19, 2024 at 7:21 PM
Static CVE Timeline Graph

Affected Systems

Atlassian/sourcetree
+null more

News

CVE-2024-21697: High Severity Flaw in Sourcetree Enables Remote Code Execution
Vulnerability Archives • Cybersecurity News / 1h
Atlassian has issued a security advisory warning of a critical remote code execution (RCE) vulnerability in its popular Sourcetree software for Mac and Windows. “ This RCE (Remote Code Execution) vulnerability… allows an unauthenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires user interaction,” Atlassian explains in their advisory.
NA - CVE-2024-21697 - This High severity RCE (Remote Code Execution)...
Security-Database Alerts Monitor : Last 100 Alerts / 5h
This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE (Remote Code Execution)...
{"{\"text\":\"High Sev RCE Vulnerability Affects Sourcetree for Mac and Windows\",\"icon\":\"⚠️\"}","{\"text\":\"Upgrade to Latest Version to Mitigate Risk\",\"icon\":\"🔄\"}"}
6h
Atlassian - HIGH - CVE-2024-21697 This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows. This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires user interaction. Atlassian recommends that Sourcetree for Mac and Sourcetree for Windows customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Sourcetree for Mac 4.2: Upgrade to a release greater than or equal to 4.2.9 Sourcetree for Windows 3.4: Upgrade to a release greater than or equal to 3.4.20 See the release notes ([https://www.sourcetreeapp.com/download-archives]). You can download the latest version of Sourcetree for Mac and Sourcetree for Windows from the download center ([https://www.sourcetreeapp.com/download-archives]). This vulnerability was reported via our Penetration Testing program.
Remote code execution in Sourcetree for Mac and Sourcetree for Windows
Security feed from CyberSecurity Help / 7h
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet. Can this vulnerability be exploited remotely?
#cve / 8h
CVE-2024-21697 - Atlassian Sourcetree Remote Code Execution Vulnerability November 19, 2024 at 07:15PM https:// ift.tt/1lzCg2b # CVE # IOC # CTI # ThreatIntelligence # ThreatIntel # Cybersecurity # Recon
See 5 more articles and social media posts

CVSS V3.1

Unknown

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI

Feedly Threat Intelligence30-day free trial