CVE-2017-7357 Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file.
CriticalCVSS 9.1
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atlassian hipchat server | <= 2.2.2 | No fix listed |
References
- 20170413 April 2017 - HipChat Server Advisory mailing-list
- 97621 third-party-advisory vdb-entry
- confluence.atlassian.com vendor-advisory
- jira.atlassian.com issue-tracking patch