Riskcovery

CVE-2017-14585

State
Published
Severity
Not scored
Published
Nov 27, 2017
Updated
Sep 16, 2024
Reserved
Sep 19, 2017

Read the record on cve.org

Description

A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2.2.0 of Hipchat Server and version 3.0.0 of Hipchat Data Center. Versions of Hipchat Server starting with 2.2.0 and before 2.2.6 are affected by this vulnerability. Versions of Hipchat Data Center starting with 3.0.0 and before 3.1.0 are affected.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Hipchat ServerAtlassian
  • 2.2.0 <= version < 4.3Affected
Hipchat Data CenterAtlassian
  • 3.0.0 <= version < 3.1.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.