Mattermost Mattermost Confluence Plugin

• CVE-2025-13523 High 7.7 Cross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow 0.2%
• CVE-2025-8285 Medium 4.0 Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin 0.2%
• CVE-2025-54525 High 7.5 Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin 0.4%
• CVE-2025-54478 High 7.2 Unauthenticated Channel Subscription Edit in Mattermost Confluence Plugin 0.3%
• CVE-2025-54463 Medium 5.9 Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin 0.3%
• CVE-2025-54458 Medium 5.0 Unauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin 0.2%
• CVE-2025-53910 Medium 4.0 Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin 0.2%
• CVE-2025-53857 Low 3.7 Lack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin 0.2%
• CVE-2025-53514 Medium 5.9 Unexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin 0.3%
• CVE-2025-52931 High 7.5 Unexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin 0.4%
• CVE-2025-49221 Low 3.7 Unauthenticated Access to Channel Subscription in Mattermost Confluence Plugin 0.3%
• CVE-2025-48731 Medium 6.4 Unauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin 0.2%
• CVE-2025-44004 High 7.2 Unauthenticated Channel Subscription Creation in Mattermost Confluence Plugin 0.2%
• CVE-2025-44001 Medium 4.0 Unauthorized Channel Subscription Read in Mattermost Confluence Plugin 0.2%