CVE-2017-8080

EUVD-2017-17043
Atlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level privileges to execute arbitrary code via vectors involving image uploads.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
atlassianhipchat_server
𝑥
≤ 2.2.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/98262
https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-24-894234898.html
https://jira.atlassian.com/browse/HCPUB-2980
http://www.securityfocus.com/bid/98262
https://confluence.atlassian.com/hc/hipchat-server-security-advisory-2017-04-24-894234898.html
https://jira.atlassian.com/browse/HCPUB-2980