Skip to content
Sign in
4.0 Medium

CVE-2025-8285 Mattermost Confluence Plugin…

Description

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API call to the create channel subscription endpoint.

Affected products and versions

Product Affected versions Fixed in
Mattermost Confluence Plugin 1.5 earliest → < 1.5.0 1.5.0

Other CVEs of Mattermost Confluence Plugin

The 14 CVEs of Mattermost Confluence Plugin →
CVE-2025-13523 Mattermost Confluence plugin… 7.7 High CVE-2025-54478 Mattermost Confluence Plugin… 7.2 High CVE-2025-54525 Mattermost Confluence Plugin… 7.5 High CVE-2025-54463 Mattermost Confluence Plugin… 5.9 Medium
Track this CVE