atlassian hipchat vulnerabilities and exploits

(subscribe to this query)

A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center. Versions of Hipchat Server starting with 2.2.0 and prior...

Atlassian Hipchat Data Center Atlassian Hipchat Server

The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 prior to 6.27.5, 6.28.0 prior to 7.3.7, and 7.4.0 prior to 7.8.17; Confluence HipChat plugin 6.26.0 prior to 7.8.17; and HipChat for JIRA plugin 6.26.0 prior to 7.8.17 allows remote malicious users to obtain the...

Acceptance of invalid/self-signed TLS certificates in Atlassian HipChat prior to 3.16.2 for iOS allows a man-in-the-middle and/or physically proximate malicious user to silently intercept information sent during the login API call.

Atlassian Hipchat

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and previous versions in HipChatNotifier.java that allows attackers with Overall/Read access to send test notifications to an attacker-specified HipChat server with attacker-specified credentials IDs o...

Atlassian Hipchat

The HipChat for JIRA plugin prior to 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecified vectors, related to "Velocity Template Injection Vulnerability."

Atlassian Hipchat

2 EDB exploits

An improper authorization vulnerability exists in Jenkins HipChat Plugin 2.2.0 and previous versions in HipChatNotifier.java that allows attackers with Overall/Read access to obtain credentials IDs for credentials stored in Jenkins.

Atlassian Hipchat

The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above version 4.0 and before version 4.30 are affected by this vulnerability.

Atlassian Hipchat

Atlassian Hipchat Server prior to 2.2.4 allows remote authenticated users with user level privileges to execute arbitrary code via vectors involving image uploads.

Atlassian Hipchat Server

Hipchat Server prior to 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file.

Atlassian Hipchat Server

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook