CVE-2025-54478

Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to the edit channel subscription endpoint.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://mattermost.com/security-updates	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mattermost:confluence:*:*:*:*:*:*:*:*

History

24 Sep 2025, 00:41

Type	Values Removed	Values Added
First Time		Mattermost confluence Mattermost
References	~~() https://mattermost.com/security-updates -~~	() https://mattermost.com/security-updates - Vendor Advisory
CPE		cpe:2.3:a:mattermost:confluence::::::::

12 Aug 2025, 14:25

Type	Values Removed	Values Added
Summary		(es) La versión <1.5.0 del complemento Mattermost Confluence no logra imponer la autenticación del usuario en la instancia de Mattermost, lo que permite que atacantes no autenticados editen las suscripciones del canal a través de una llamada API al endpoint de edición de suscripción del canal.

11 Aug 2025, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-11 19:15

Updated : 2025-09-24 00:41

NVD link : CVE-2025-54478

Mitre link : CVE-2025-54478

CVE.ORG link : CVE-2025-54478

JSON object : View

Products Affected

mattermost

confluence

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-54478", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "responsibledisclosure@mattermost.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2025-08-11T19:15:30.220", "references": [{"url": "https://mattermost.com/security-updates", "tags": ["Vendor Advisory"], "source": "responsibledisclosure@mattermost.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "responsibledisclosure@mattermost.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to edit channel subscriptions via API call to the edit channel subscription endpoint."}, {"lang": "es", "value": "La versi\u00f3n <1.5.0 del complemento Mattermost Confluence no logra imponer la autenticaci\u00f3n del usuario en la instancia de Mattermost, lo que permite que atacantes no autenticados editen las suscripciones del canal a trav\u00e9s de una llamada API al endpoint de edici\u00f3n de suscripci\u00f3n del canal."}], "lastModified": "2025-09-24T00:41:21.053", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3ACC4A55-809B-4D7B-8B5B-4BEFCBF63E2F", "versionEndExcluding": "1.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "responsibledisclosure@mattermost.com"}