CVE-2025-54525
Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
Résumé
Unexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web mattermost.com