CVE-2017-14586

Critical

Description

The Hipchat for Mac desktop client is vulnerable to client-side remote code execution via video call link parsing. Hipchat for Mac desktop clients at or above version 4.0 and before version 4.30 are affected by this vulnerability.

SeverityCritical
CVSS9.8
Exploit probability—
ProductAtlassian Hipchat
PublishedNov 27, 2017
First seenNov 27, 2017

How to fix

Update
  • atlassian hipchat4.30 or later

Affected products

ProductAffected versionsFixed in
atlassian hipchat4.0 ≤ v < 4.304.30

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2017-14586 · Atlassian Hipchat · Dark Radar