Mattermost Confluence Plugin
14 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Mattermost Confluence Plugin. Use it to gauge the current risk picture and drill into individual advisories.
Mattermost Confluence Plugin CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 13 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 1 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 14 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High5
- Medium7
- Low2
Latest CVEs
The 14 most recently published vulnerabilities affecting Mattermost Confluence Plugin.
- CVE-2025-13523Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow7.7
- CVE-2025-8285Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin4.0
- CVE-2025-54525Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5
- CVE-2025-54478Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin7.2
- CVE-2025-54463Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9
- CVE-2025-54458Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin5.0
- CVE-2025-53910Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin4.0
- CVE-2025-53857Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin3.7
- CVE-2025-53514Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9
- CVE-2025-52931Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5
- CVE-2025-48731Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin6.4
- CVE-2025-49221Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin3.7
- CVE-2025-44004Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin7.2
- CVE-2025-44001Unauthorized Channel Subscription Read in Mattermost Confluence Plugin4.0
Product grouping is registry-driven, with AI assist and human review. How it works