Confluence vulnerabilities
4 known vulnerabilities in Confluence from Mattermost. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Mattermost Confluence Plugin: Improper Validation of Specified Type of Input
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body.
- 7.5 High severity
Mattermost Confluence Plugin: Improper Check for Unusual or Exceptional Conditions
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body.
- 7.5 High severity
Mattermost Confluence Plugin: Improper Check for Unusual or Exceptional Conditions
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body.
- 7.2 High severity
Mattermost Confluence Plugin: Missing Authentication for Critical Functionality
Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint.