github.com/mattermost/mattermost-plugin-confluence vulnerabilities (Go)

14 vulnerabilities.

• github.com/mattermost/mattermost-plugin-confluence Go Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow CVE-2025-13523 Fix available 7.7 HighFebruary 6, 2026
• github.com/mattermost/mattermost-plugin-confluence Go Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin CVE-2025-8285 Fix available 4.0 MediumAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin CVE-2025-54525 Fix available 7.5 HighAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin CVE-2025-54478 Fix available 7.2 HighAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin CVE-2025-54463 Fix available 5.9 MediumAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin CVE-2025-54458 Fix available 5.0 MediumAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin CVE-2025-53910 Fix available 4.0 MediumAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin CVE-2025-53857 Fix available 3.7 LowAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin CVE-2025-53514 Fix available 5.9 MediumAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin CVE-2025-52931 Fix available 7.5 HighAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin CVE-2025-49221 Fix available 3.7 LowAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin CVE-2025-48731 Fix available 6.4 MediumAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin CVE-2025-44004 Fix available 7.2 HighAugust 11, 2025
• github.com/mattermost/mattermost-plugin-confluence Go Unauthorized Channel Subscription Read in Mattermost Confluence Plugin CVE-2025-44001 Fix available 4.0 MediumAugust 11, 2025