CVE-2025-54525 — Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription en…
Published: 2025-08-11 · CVSS: 7.5 · CVSS 3.1
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7