| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-plugin-confluence | < 1.5.0 | 1.5.0 |
| confluence | < 1.5.0 | 1.5.0 |
Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free