Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mattermost Confluence Plugin — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in Mattermost Confluence Plugin, with AI-generated Chinese analysis, references, and POCs.

This page documents known vulnerability aggregations for the Mattermost Confluence Plugin, categorized under software weakness classifications. It collects and organizes security issues related to this specific plugin, covering data from its initial release through recent updates to ensure historical context and current relevance. Here, users can track vendor advisories to stay informed about official patches and mitigations, understand the broader implications of specific weakness classes within the Confluence ecosystem, and look up the product’s vulnerability history to assess long-term security trends. The aggregation aims to provide a clear, centralized view of risks associated with the integration between Mattermost and Confluence, helping administrators and security analysts prioritize remediation efforts based on verified data rather than fragmented reports. By focusing on this niche but critical integration point, the page highlights how configuration errors, input validation flaws, or permission misconfigurations can lead to broader security compromises. Users are encouraged to use this resource as a starting point for deeper investigation into specific CVE entries, cross-referencing with official vendor bulletins and community-driven security discussions. The goal is to facilitate proactive security management by making historical and current vulnerability data accessible, thereby reducing the time required to identify and address potential threats in environments utilizing the Mattermost Confluence Plugin.

Vendor: Mattermost

CVE ID Title CVSS Severity Published
CVE-2025-13523 Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow CWE-79 7.7 High 2026-02-06
CVE-2025-8285 Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin CWE-862 4.0 Medium 2025-08-11
CVE-2025-54525 Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin CWE-1287 7.5 High 2025-08-11
CVE-2025-54478 Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin CWE-306 7.2 High 2025-08-11
CVE-2025-54463 Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin CWE-754 5.9 Medium 2025-08-11
CVE-2025-54458 Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin CWE-862 5.0 Medium 2025-08-11
CVE-2025-53910 Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin CWE-862 4.0 Medium 2025-08-11
CVE-2025-53514 Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin CWE-754 5.9 Medium 2025-08-11
CVE-2025-53857 Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin CWE-862 3.7 Low 2025-08-11
CVE-2025-52931 Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin CWE-754 7.5 High 2025-08-11
CVE-2025-49221 Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin CWE-862 3.7 Low 2025-08-11
CVE-2025-48731 Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin CWE-862 6.4 Medium 2025-08-11
CVE-2025-44004 Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin CWE-306 7.2 High 2025-08-11
CVE-2025-44001 Unauthorized Channel Subscription Read in Mattermost Confluence Plugin CWE-862 4.0 Medium 2025-08-11

All 14 known CVE vulnerabilities affecting Mattermost Confluence Plugin with full Chinese analysis, references, and POCs where available.