Description
The Atlassian Hipchat Integration Plugin for Bitbucket Server 6.26.0 before 6.27.5, 6.28.0 before 7.3.7, and 7.4.0 before 7.8.17; Confluence HipChat plugin 6.26.0 before 7.8.17; and HipChat for JIRA plugin 6.26.0 before 7.8.17 allows remote attackers to obtain the secret key for communicating with HipChat instances by reading unspecified pages.
Remediation
References
Related Vulnerabilities
PleskLin Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-43784)
Drupal Incorrect Authorization Vulnerability (CVE-2022-25270)
Chamilo URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-9540)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-46147)