← Database

CVE-2025-44004

HIGH CVSS: 7.2 Published: 2025-08-11 Modified: 2026-06-17

Description

Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint.

Affected Platforms

Mattermost Confluence

Weakness Type

CWE-306

References