| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/mattermost/mattermost-plugin-confluence | < 1.5.0 | 1.5.0 |
| confluence | < 1.5.0 | 1.5.0 |
Mattermost Confluence Plugin versions < 1.5.0 fail to enforce authentication of the user to the Mattermost instance, which allows unauthenticated attackers to access subscription details via an API call to the GET subscription endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free