Mattermost Confluence Plugin
Approved changes feed: RSS · Atom
cpe:2.3:a:mattermost:mattermost_confluence_plugin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mattermost (ed0788ef-af60-58f1-b6aa-68289d9946dc) |
|---|---|
| Product | Mattermost Confluence Plugin (e64b28b4-f388-5bd2-8bd0-41e1b0c1692f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8285 |
vulnerable | 2026-06-08 07:45:19.925705 |
Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin
MEDIUM (4)
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API call to the create channel subscription endpoint.
Published: 2025-08-11T18:57:07.701Z
Updated: 2025-08-11T19:41:20.762Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54525 |
vulnerable | 2026-06-08 07:33:12.802854 |
Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
HIGH (7.5)
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body.
Published: 2025-08-11T18:57:06.841Z
Updated: 2025-08-11T19:40:57.217Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54478 |
vulnerable | 2026-06-08 07:33:12.637995 |
Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin
HIGH (7.2)
Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to the edit channel subscription endpoint.
Published: 2025-08-11T18:57:06.088Z
Updated: 2025-08-11T19:40:33.338Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54463 |
vulnerable | 2026-06-08 07:33:12.619518 |
Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin
MEDIUM (5.9)
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body.
Published: 2025-08-11T18:57:05.342Z
Updated: 2025-08-11T19:39:08.495Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54458 |
vulnerable | 2026-06-08 07:33:12.611248 |
Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin
MEDIUM (5)
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint.
Published: 2025-08-11T18:57:04.545Z
Updated: 2025-08-11T19:38:22.132Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53910 |
vulnerable | 2026-06-08 07:31:15.931710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53857 |
vulnerable | 2026-06-08 07:31:15.829122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53514 |
vulnerable | 2026-06-08 07:31:14.651107 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52931 |
vulnerable | 2026-06-08 07:31:13.199560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49221 |
vulnerable | 2026-06-08 07:29:12.774346 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48731 |
vulnerable | 2026-06-08 07:29:11.340962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44004 |
vulnerable | 2026-06-08 07:25:10.570211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44001 |
vulnerable | 2026-06-08 07:25:10.566235 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13523 |
vulnerable | 2026-06-08 07:04:32.445070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.