Description
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating with HipChat instances by reading unspecified pages.
Remediation
References
Related Vulnerabilities
WordPress Plugin Login With Ajax Cross-Site Request Forgery (3.0.4.1)
Contao Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-19745)
WordPress Plugin WPPizza Cross-Site Scripting (2.11.8.17)
MySQL CVE-2021-35640 Vulnerability (CVE-2021-35640)
WordPress Plugin myCred-Points, Rewards, Gamification, Ranks, Badges & Loyalty SQL Injection (2.2)