CVE-2017-14585

The CVE-2017-14585 entry describes a Server Side Request Forgery (SSRF) that could lead to remote code execution for authenticated administrators. Affected products are Hipchat Server (versions 2.2.0–2.2.5) and Hipchat Data Center (versions 3.0.0–3.0.9). The issue was introduced in those ranges a...

CVE-2017-8080

CVE-2017-8080 affects Atlassian HipChat Server prior to 2.2.4. The issue allows remote authenticated users with user-level privileges to execute arbitrary code via vectors involving image uploads due to improper validation of uploaded images. An authenticated, remote attacker can exploit this by ...

CVE-2017-7357

CVE-2017-7357 affects Hipchat Server, specifically versions prior to 2.2.3. The vulnerability allows remote authenticated users with Server Administrator privileges to execute arbitrary code by importing a file. The issue is attributed to the Administrative Imports pathway, enabling code executio...