CVE-2017-8080

Atlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level privileges to execute arbitrary code via vectors involving image uploads.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
VendorProductVersion
atlassianhipchat_server
𝑥
≤ 2.2.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/98262
https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-24-894234898.html
https://jira.atlassian.com/browse/HCPUB-2980
http://www.securityfocus.com/bid/98262
https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-24-894234898.html
https://jira.atlassian.com/browse/HCPUB-2980