Skip to content
Sign in
3.7 Low

CVE-2025-49221 Mattermost Confluence Plugin…

Description

Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription details without via API call to GET subscription endpoint.

Affected products and versions

Product Affected versions Fixed in
Mattermost Confluence Plugin 1.5 earliest → < 1.5.0 1.5.0

Other CVEs of Mattermost Confluence Plugin

The 14 CVEs of Mattermost Confluence Plugin →
CVE-2025-13523 Mattermost Confluence plugin… 7.7 High CVE-2025-8285 Mattermost Confluence Plugin… 4.0 Medium CVE-2025-54525 Mattermost Confluence Plugin… 7.5 High CVE-2025-54478 Mattermost Confluence Plugin… 7.2 High
Track this CVE