Lucene search
+L

272 matches found

Snyk
Snyk
•added 2025/08/11 9:31 p.m.•5 views

Improper Check for Unusual or Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the constant hits to the server webhook endpoint with an invalid request body. An attacker can cause the plugin to crash by repeatedly sending invalid request bodies to the...

8.2CVSS7AI score0.00285EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/08/11 9:31 p.m.•16 views

Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin versions 1.5.0 fails to handle unexpected request bodies, allowing attackers to crash the plugin via constant hits to the server webhook endpoint with an invalid request body...

7.5CVSS7AI score0.00297EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/08/11 9:31 p.m.•17 views

GHSA-GJPM-6W34-PPVF Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin versions 1.5.0 fails to handle unexpected request bodies, allowing attackers to crash the plugin via constant hits to the server webhook endpoint with an invalid request body...

5.9CVSS7AI score0.00297EPSS
SaveExploits0References4
OSV
OSV
•added 2025/08/11 9:31 p.m.•9 views

GHSA-W92J-C6GR-HJ8R Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin versions 1.5.0 fail to handle unexpected request bodies, allow\ing attackers to crash the plugin via constant hits to the server webhook endpoint with an invalid request body...

5.9CVSS7AI score0.00285EPSS
SaveExploits0References3
NVD
NVD
•added 2025/08/11 7:15 p.m.•17 views

CVE-2025-54463

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

7.5CVSS0.00297EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/11 7:15 p.m.•18 views

CVE-2025-53514

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

5.9CVSS0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/11 6:57 p.m.•21 views

CVE-2025-54463 Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

5.9CVSS0.00297EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/11 6:57 p.m.•151 views

CVE-2025-54463

Mattermost Confluence Plugin (github.com/mattermost/mattermost-plugin-confluence) versions

7.5CVSS7.1AI score0.00297EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/11 6:57 p.m.•2 views

CVE-2025-54463 Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

5.9CVSS7.1AI score0.00297EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/11 6:57 p.m.•10 views

CVE-2025-54463 Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

5.9CVSS6.3AI score
SaveExploits0References4
OSV
OSV
•added 2025/08/11 6:57 p.m.•11 views

CVE-2025-53514 Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

5.9CVSS6.3AI score
SaveExploits0References4
CVE
CVE
•added 2025/08/11 6:57 p.m.•154 views

CVE-2025-53514

Mattermost Confluence Plugin (versions

5.9CVSS7.1AI score0.00285EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•3 views

CVE-2025-53514: Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

5.9CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/11 12:00 a.m.•3 views

CVE-2025-54463: Improper Check for Unusual or Exceptional Conditions

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

7.5CVSS5.8AI score0.00297EPSS
SaveExploits0References1
Metasploit
Metasploit
•added 2025/08/04 12:00 a.m.•352 views

WordPress StoryChief Plugin Unauthenticated RCE

This module exploits an unauthenticated arbitrary file upload vulnerability in the StoryChief WordPress plugin use exploit/multi/http/wp/pluginstorycheffileupload msf undefinedpluginstorycheffileupload show actions ...actions... msf undefinedpluginstorycheffileupload set ACTION msf...

9.8CVSS5.8AI score0.50059EPSS
SaveExploits8
Positive Technologies
Positive Technologies
•added 2025/07/10 12:00 a.m.•10 views

PT-2025-32577

Name of the Vulnerable Software and Affected Versions: Mattermost Confluence Plugin versions prior to 1.5.0 Description: The Mattermost Confluence Plugin does not properly handle unexpected request bodies. Attackers can exploit this to crash the plugin by repeatedly sending invalid requests to th...

5.9CVSS6.8AI score0.00285EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/07/10 12:00 a.m.•11 views

PT-2025-32581

Name of the Vulnerable Software and Affected Versions: Mattermost Confluence Plugin versions prior to 1.5.0 Description: The Mattermost Confluence Plugin does not properly handle unexpected request bodies. Attackers can exploit this to crash the plugin by repeatedly sending invalid request bodies...

7.5CVSS6.8AI score0.00297EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 4:13 a.m.•21 views

CVE-2023-40349

Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs...

5.3CVSS6.8AI score0.00679EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 11:37 p.m.•10 views

CVE-2022-41234

Jenkins Rundeck Plugin 3.6.11 and earlier does not protect access to the /plugin/rundeck/webhook/ endpoint, allowing users with Overall/Read permission to trigger jobs that are configured to be triggerable via Rundeck...

8.8CVSS8.2AI score0.00971EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/05 12:00 a.m.•4 views

CVE-2024-39713: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1...

8.6CVSS7.8AI score0.03201EPSS
SaveExploits2References1
Rows per page
Query Builder