GHSA-j66h-xhpr-7q5g
Mattermost Confluence Plugin has Missing Authorization vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/mattermost/mattermost-plugin-confluence | < 1.5.0 | 1.5.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Mattermost Confluence Plugin versions < 1.5.0 fails to check user access of the Confluence space, allowing attackers to create a subscription to a Confluence space the user does not have access to via the create subscription endpoint.
References
External links from the advisory. They lead to third-party sites.