Atlassian Hipchat Server
3 CVEs affecting Atlassian Hipchat Server. Latest disclosed: 2017-11-27. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7357 | Critical | 9.1 | 2017-04-14 | Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file. |
CVE-2017-8080 | High | 8.8 | 2017-05-05 | Atlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level privileges to execute arbitrary code via vectors involving image upload… |
CVE-2017-14585 | High | 7.2 | 2017-11-27 | A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2… |