Skip to content
Sign in
3.7 Low

CVE-2025-53857 Mattermost Confluence Plugin…

Description

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the GET autocomplete/GetChannelSubscriptions endpoint.

Affected products and versions

Product Affected versions Fixed in
Mattermost Confluence Plugin 1.5 earliest → < 1.5.0 1.5.0

Other CVEs of Mattermost Confluence Plugin

The 14 CVEs of Mattermost Confluence Plugin →
CVE-2025-13523 Mattermost Confluence plugin… 7.7 High CVE-2025-8285 Mattermost Confluence Plugin… 4.0 Medium CVE-2025-54525 Mattermost Confluence Plugin… 7.5 High CVE-2025-54478 Mattermost Confluence Plugin… 7.2 High
Track this CVE