Hipchat Data Center / Hipchat Server Code Execution / SSRF Vulnerabilities

Hipchat Data Center and Hipchat Server suffer from server-side request forgery and remote code execution vulnerabilities. Hipchat Data Center / Hipchat Server Code Execution / SSRF Vulnerabilities Products: Hipchat Data Center, Hipchat Server CVE ID: CVE-2017-14585 Affected Hipchat Data Center...

CVE-2017-14585

A Server Side Request Forgery SSRF vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center. Versions of Hipchat Server starting with 2.2.0 and before 2.2.6 are affecte...

CVE-2017-14585

A Server Side Request Forgery SSRF vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center. Versions of Hipchat Server starting with 2.2.0 and before 2.2.6 are affecte...