CVE-2017-14586

The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above version 4.0 and before version 4.30 are affected by this vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@atlassian.com

Published

2017-11-27

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Hipchat (Atlassian)
• Hipchat For Mac Desktop Client (Atlassian)

References

• http://www.securityfocus.com/bid/101947
• https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-11-22-939946293.html
• https://jira.atlassian.com/browse/HCPUB-3473