目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

Mattermost Confluence Plugin 产品漏洞列表 / CVE 中文分析 14

Mattermost Confluence Plugin 产品相关 14 条漏洞,AI 中文标题与摘要、CVSS、POC 一站汇总。

Mattermost Confluence Plugin 是一款由 Mattermost 开发的协作工具插件,本文档汇集了该产品的各类安全漏洞信息,涵盖从首次披露至近期的历史数据。本页聚合了与该插件相关的注入、权限绕过及跨站脚本等常见弱点类型,旨在帮助安全从业者追踪官方安全公告,深入了解特定功能模块的已知缺陷。您可以利用此页面检索该产品的历史漏洞记录,评估潜在风险,并为系统补丁升级和配置加固提供数据支持,确保企业通信平台的稳定性与安全性。

ベンダー: Mattermost

CVE IDタイトルCVSS深刻度公開日
CVE-2025-13523 Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow CWE-79 7.7 High2026-02-06
CVE-2025-8285 Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin CWE-862 4.0 Medium2025-08-11
CVE-2025-54525 Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin CWE-1287 7.5 High2025-08-11
CVE-2025-54478 Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin CWE-306 7.2 High2025-08-11
CVE-2025-54463 Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin CWE-754 5.9 Medium2025-08-11
CVE-2025-54458 Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin CWE-862 5.0 Medium2025-08-11
CVE-2025-53910 Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin CWE-862 4.0 Medium2025-08-11
CVE-2025-53514 Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin CWE-754 5.9 Medium2025-08-11
CVE-2025-53857 Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin CWE-862 3.7 Low2025-08-11
CVE-2025-52931 Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin CWE-754 7.5 High2025-08-11
CVE-2025-49221 Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin CWE-862 3.7 Low2025-08-11
CVE-2025-48731 Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin CWE-862 6.4 Medium2025-08-11
CVE-2025-44004 Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin CWE-306 7.2 High2025-08-11
CVE-2025-44001 Unauthorized Channel Subscription Read in Mattermost Confluence Plugin CWE-862 4.0 Medium2025-08-11

Mattermost Confluence Plugin 产品累计公开 14 条 CVE 漏洞,本页提供按时间倒序的完整列表,包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。