Skip to content
Sign in
7.2 High

CVE-2025-54478 Mattermost Confluence Plugin…

Description

Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to the edit channel subscription endpoint.

Affected products and versions

Product Affected versions Fixed in
Mattermost Confluence Plugin 1.5 earliest → < 1.5.0 1.5.0

Other CVEs of Mattermost Confluence Plugin

The 14 CVEs of Mattermost Confluence Plugin →
CVE-2025-13523 Mattermost Confluence plugin… 7.7 High CVE-2025-8285 Mattermost Confluence Plugin… 4.0 Medium CVE-2025-54525 Mattermost Confluence Plugin… 7.5 High CVE-2025-54463 Mattermost Confluence Plugin… 5.9 Medium
Track this CVE