Remote code execution in HipChat Server and Data Center via SSRF in 'admin' interface - CVE-2017-14585

This issue belongs to an archived project. You can view it, but you can't modify it. Learn more

XMLWordPrintable

    • Severity 1 - Critical

      A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators.

      For additional details, please see the full advisory.

      Affected Versions

      • Versions of Hipchat Server starting with 2.2.0 and before 2.2.6 and versions of Hipchat Data Center starting with 3.0.0 and before 3.1.0 are affected by this vulnerability.

      Fix

              Assignee:
              Unassigned
              Reporter:
              Robbie (Inactive)
              Archiver:
              Michael Andreacchio

                Created:
                Updated:
                Resolved:
                Archived: