Remote code execution in HipChat Desktop Mac client via video link parsing

The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing.

For additional details, please see the full advisory.

Affected Versions

• This issue was introduced in version 4.0 of the Hipchat for Mac desktop client. Versions of Hipchat for Mac desktop client starting with 4.0 before 4.30 are affected by this vulnerability.

Fix

• Hipchat for Mac desktop client version 4.30 is available to download from https://www.hipchat.com/downloads/latest/mac.