Mattermost Confluence Plugin is Missing Authentication for Critical Function

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-44004 · ADVISORY
• mattermost/mattermost-plugin-confluence · PACKAGE
• mattermost.com/security-updates · WEB
• GitHub Advisory GHSA-6ff3-jgxh-vffj · ADVISORY

github.com/mattermost/mattermost-plugin-confluence のその他の脆弱性

• CVE-2025-13523中 5.4Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows a…
• CVE-2025-8285中 5.3Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel su…
• CVE-2025-54525高 7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant …
• CVE-2025-54478中 5.3Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthentica…
• CVE-2025-54463高 7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant …