Skip to content
Sign in
7.5 High

CVE-2025-54525 Mattermost Confluence Plugin…

Description

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body.

Affected products and versions

Product Affected versions Fixed in
Mattermost Confluence Plugin 1.5 earliest → < 1.5.0 1.5.0

Other CVEs of Mattermost Confluence Plugin

The 14 CVEs of Mattermost Confluence Plugin →
CVE-2025-13523 Mattermost Confluence plugin… 7.7 High CVE-2025-8285 Mattermost Confluence Plugin… 4.0 Medium CVE-2025-54478 Mattermost Confluence Plugin… 7.2 High CVE-2025-54463 Mattermost Confluence Plugin… 5.9 Medium
Track this CVE