critical9.8
CVE-2017-14586
The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing.
Impact
The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above version 4.0 and before version 4.30 are affected by this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Hipchat | from 4.0 before 4.30 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/101947
- https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html
- https://jira.atlassian.com/browse/HCPUB-3473
- http://www.securityfocus.com/bid/101947
- https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html
- https://jira.atlassian.com/browse/HCPUB-3473