CVE-2025-53910 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Mattermost Confluence Plugin version
Medium CVSS: 4.0

CVE-2025-53910

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint.
Vendor
Mattermost
Product
Confluence
CWE
CWE-862
Yayın Tarihi
2025-08-11 19:15:29
Güncelleme
2025-09-25 18:56:23
Source Identifier
responsibledisclosure@mattermost.com
KEV Date Added
-

Kategoriler

Referanslar