github.com/mattermost/mattermost-plugin-jira vulnerabilities (Go)

3 vulnerabilities.

• github.com/mattermost/mattermost-plugin-jira Go Mattermost Jira plugin user spoofing enables Jira request forgery. CVE-2025-14273 Fix available 7.2 HighDecember 22, 2025
• github.com/mattermost/mattermost-plugin-jira Go Missing authorization allows users to access arbitrary security levels on Jira through webhooks (Jira Plugin) CVE-2024-24774 Fix available 3.4 LowFebruary 9, 2024
• github.com/mattermost/mattermost-plugin-jira Go CSRF issue allows disconnecting a user's Jira connection through a simple post message (Jira Plugin) CVE-2024-23319 Fix available 3.5 LowFebruary 9, 2024