CVE-2017-8080

CVE-2017-8080 describes a critical arbitrary code execution vulnerability affecting Atlassian Hipchat Server versions prior to 2.2.4. Authenticated users with standard user privileges can exploit this flaw by uploading specially crafted images. With a CVSS score of 8.8 (High), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has seen minimal community discussion.