Mattermost Confluence vulnerabilities

• mattermost confluence, confluence plugin +1 more Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow CVE-2025-13523 Fix available 7.7 HighFebruary 6, 2026
• mattermost confluence, confluence plugin +1 more Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin CVE-2025-8285 Fix available 4.0 MediumAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin CVE-2025-54525 Fix available 7.5 HighAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin CVE-2025-54478 Fix available 7.2 HighAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin CVE-2025-54463 Fix available 5.9 MediumAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin CVE-2025-54458 Fix available 5.0 MediumAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin CVE-2025-53910 Fix available 4.0 MediumAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin CVE-2025-53857 Fix available 3.7 LowAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin CVE-2025-53514 Fix available 5.9 MediumAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin CVE-2025-52931 Fix available 7.5 HighAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin CVE-2025-49221 Fix available 3.7 LowAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin CVE-2025-48731 Fix available 6.4 MediumAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin CVE-2025-44004 Fix available 7.2 HighAugust 11, 2025
• mattermost confluence, confluence plugin +1 more Unauthorized Channel Subscription Read in Mattermost Confluence Plugin CVE-2025-44001 Fix available 4.0 MediumAugust 11, 2025