cve.bz

CVE-2025-48731

6.4 mediumEPSS 0.2%

Medium (6.4) in mattermost confluence. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/mattermost/mattermost-plugin-confluence 1.5.0.

Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the user does not have access for via edit subscription endpoint.

Severity

CVSS 3.1

6.4 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE
CWE-862
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-cmpr-8prq-w5p5Gogithub.com/mattermost/mattermost-plugin-confluence<1.5.01.5.0
GO-2025-3861Gogithub.com/mattermost/mattermost-plugin-confluence<1.5.01.5.0

References

Check your stackJSON