Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-54463 · ADVISORY
• mattermost/mattermost-plugin-confluence · PACKAGE
• mattermost.com/security-updates · WEB
• pkg.go.dev/vuln/GO-2025-3866 · WEB
• GitHub Advisory GHSA-gjpm-6w34-ppvf · ADVISORY

Weitere Schwachstellen in github.com/mattermost/mattermost-plugin-confluence

• CVE-2025-13523MITTEL 5.4Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows a…
• CVE-2025-8285MITTEL 5.3Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel su…
• CVE-2025-54525HOCH 7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant …
• CVE-2025-54478MITTEL 5.3Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthentica…
• CVE-2025-54458MITTEL 5.0Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a…