Loading vulnerability details…
CVSS v3.1
4.0
EPSS
0.20%
Published
Aug 11, 2025
Modified
Sep 23, 2025
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API call to the create channel subscription endpoint.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:NWeaknesses (CWE)
Affected Products (1)
References (1)