CVE-2025-8285

Description

Mattermost Confluence Plugin has Missing Authorization vulnerability in github.com/mattermost/mattermost-plugin-confluence

Affected packages (2)

• Go/github.com/mattermost/mattermost-plugin-confluencefrom 0, < 1.5.0
• Go/github.com/mattermost/mattermost-plugin-confluencefrom 0, < 1.5.0

CVSS scores

References (5)

• ADVISORYhttps://github.com/advisories/GHSA-qjrx-j8wm-xf83
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-8285
• PATCHhttps://github.com/mattermost/mattermost-plugin-confluence
• WEBhttps://mattermost.com/security-updates
• WEBhttps://pkg.go.dev/vuln/GO-2025-3868