Mattermost Confluence Plugin has Improper Check for Unusual or Exceptional Conditions

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-53514 · ADVISORY
• mattermost/mattermost-plugin-confluence · PACKAGE
• mattermost.com/security-updates · WEB
• GitHub Advisory GHSA-w92j-c6gr-hj8r · ADVISORY

github.com/mattermost/mattermost-plugin-confluence 的其他漏洞

• CVE-2025-13523中危 5.4Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows a…
• CVE-2025-8285中危 5.3Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel su…
• CVE-2025-54525高危 7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant …
• CVE-2025-54478中危 5.3Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthentica…
• CVE-2025-54463高危 7.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant …