7.5
High
CVE-2025-52931 Mattermost Confluence Plugin…
Description
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mattermost Confluence Plugin 1.5 | earliest → < 1.5.0 | 1.5.0 |