CVE-2025-54458

Description

Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence

Affected packages (2)

• Go/github.com/mattermost/mattermost-plugin-confluencefrom 0, < 1.5.0
• Go/github.com/mattermost/mattermost-plugin-confluencefrom 0, < 1.5.0

CVSS scores

References (4)

• ADVISORYhttps://github.com/advisories/GHSA-j66h-xhpr-7q5g
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-54458
• PATCHhttps://github.com/mattermost/mattermost-plugin-confluence
• WEBhttps://mattermost.com/security-updates