Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21458)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the creation of subscriptions...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21457)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21452)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21453)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause unauthorized channel subscriptions...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21459)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause an edit channel subscription...

Confluence Mattermost Plugin Privilege Escalation

The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker who operates remotely to increase their privileges...

Confluence Mattermost Plugin Auth Bypass Privilege Escalation

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information and increase their privileges...

Confluence Mattermost Plugin Auth Bypass

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Confluence Mattermost Plugin DoS

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Confluence Mattermost Plugin Auth Bypass

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Confluence Mattermost Plugin DoS

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Confluence Mattermost Plugin DoS

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Confluence Mattermost Plugin DoS

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to improper validation of the specified data type. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Confluence Mattermost Plugin Auth Bypass

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Confluence Mattermost Plugin Auth Bypass

The vulnerability of the Confluence plugin for the instant messaging application Mattermost is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Confluence Mattermost Plugin Auth Bypass

The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain read and edit access to data...

CVE-2025-53514

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body...

CVE-2025-48731

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the user does not have access for via edit subscription endpoint...

CVE-2025-54478

Mattermost Confluence Plugin version 1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to the edit channel subscription endpoint...

CVE-2025-54525

Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body...