CVE-2025-44004 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Mattermost Confluence Plugin version
High CVSS: 7.2

CVE-2025-44004

Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance which allows attackers to create a channel subscription without proper authorization via API call to the create channel subscription endpoint.
Vendor
Mattermost
Product
Confluence
CWE
CWE-306
Yayın Tarihi
2025-08-11 19:15:27
Güncelleme
2025-09-25 18:53:07
Source Identifier
responsibledisclosure@mattermost.com
KEV Date Added
-

Kategoriler

Referanslar