PT-2025-32581 · WordPress · Mattermost Confluence Plugin

Lorenzo Gallegos · Published 2025-07-10 · Updated 2025-08-20 · CVE-2025-54463

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Mattermost Confluence Plugin versions prior to 1.5.0

Description: The Mattermost Confluence Plugin does not properly handle unexpected request bodies. Attackers can exploit this to crash the plugin by repeatedly sending invalid request bodies to the server webhook endpoint.

Recommendations: Update Mattermost Confluence Plugin to version 1.5.0 or later.

Fix

DoS

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

BDU:2025-09761

CVE-2025-54463

GHSA-GJPM-6W34-PPVF

GO-2025-3866

OPENSUSE-SU-2025:15469-1

Affected Products

Mattermost Confluence Plugin

References · 33

• https://mattermost.com/security-updates · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gjpm-6w34-ppvf · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3866 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54463 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15469-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54463 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09761 · Security Note
• https://github.com/mattermost/mattermost-plugin-confluence · Note
• https://suse.com/security/cve/CVE-2025-52931 · Note
• https://suse.com/security/cve/CVE-2025-55196 · Note
• https://suse.com/security/cve/CVE-2025-55198 · Note
• https://pkg.go.dev/vuln/GO-2025-3866 · Note
• https://suse.com/security/cve/CVE-2025-54458 · Note
• https://suse.com/security/cve/CVE-2025-53910 · Note
• https://suse.com/security/cve/CVE-2025-55199 · Note