CVE-2025-44004 Information

Aug 12, 2025 cve

Description

Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint.

Reference

https://mattermost.com/security-updates

CNNVD-202508-945 (Published: 2025-08-11)

Share on: