Skip to content
Sign in
5.0 Medium

CVE-2025-54458 Mattermost Confluence Plugin…

Description

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint.

Affected products and versions

Product Affected versions Fixed in
Mattermost Confluence Plugin 1.5 earliest → < 1.5.0 1.5.0

Other CVEs of Mattermost Confluence Plugin

The 14 CVEs of Mattermost Confluence Plugin →
CVE-2025-13523 Mattermost Confluence plugin… 7.7 High CVE-2025-8285 Mattermost Confluence Plugin… 4.0 Medium CVE-2025-54525 Mattermost Confluence Plugin… 7.5 High CVE-2025-54478 Mattermost Confluence Plugin… 7.2 High
Track this CVE