CVE-2025-54463
Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin
Résumé
Unexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web mattermost.com