6.4
CVE-2025-48731
- EPSS 0.03%
- Published 11.08.2025 18:56:59
- Last modified 25.09.2025 18:55:22
- Source responsibledisclosure@mattermo
- Teams watchlist Login
- Open Login
Mattermost Confluence Plugin version <1.5.0 fails to check the access of the user to the Confluence space which allows attackers to edit a subscription for a Confluence space the user does not have access for via edit subscription endpoint.
Data is provided by the National Vulnerability Database (NVD)
Mattermost ≫ Confluence SwPlatformmattermost Version < 1.5.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Type | Source | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.03% | 0.087 |
Source | Base Score | Exploit Score | Impact Score | Vector string |
---|---|---|---|---|
responsibledisclosure@mattermost.com | 6.4 | 3.1 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.