Confluence
Approved changes feed: RSS · Atom
cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*
part: a version: * update: *
| Vendor | Mattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc) |
|---|---|
| Product | Confluence (8b459c04-ca5f-5179-8074-5702894bef5d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | mattermost |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mattermost/mattermost-for-confluence |
purl2cpe | 2026-06-01 10:18:19.744759 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-54458 |
vulnerable | 2026-06-08 07:33:12.612278 |
Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin
MEDIUM (5)
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint.
Published: 2025-08-11T18:57:04.545Z
Updated: 2025-08-11T19:38:22.132Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53910 |
vulnerable | 2026-06-08 07:31:15.931852 |
Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin
MEDIUM (4)
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint.
Published: 2025-08-11T18:57:03.212Z
Updated: 2025-08-11T19:37:44.454Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53857 |
vulnerable | 2026-06-08 07:31:15.829286 |
Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin
LOW (3.7)
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the GET autocomplete/GetChannelSubscriptions endpoint.
Published: 2025-08-11T18:57:02.377Z
Updated: 2025-08-11T19:37:14.499Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53514 |
vulnerable | 2026-06-08 07:31:14.651150 |
Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin
MEDIUM (5.9)
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body.
Published: 2025-08-11T18:57:01.515Z
Updated: 2025-08-11T19:36:46.050Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52931 |
vulnerable | 2026-06-08 07:31:13.200933 |
Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
HIGH (7.5)
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body.
Published: 2025-08-11T18:57:00.672Z
Updated: 2025-08-11T19:36:18.801Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48731 |
vulnerable | 2026-06-08 07:29:11.342594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44004 |
vulnerable | 2026-06-08 07:25:10.570252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44001 |
vulnerable | 2026-06-08 07:25:10.567142 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13523 |
vulnerable | 2026-06-08 07:04:32.446725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.