Listen to this Post
The CVE-2025-XXXXX vulnerability in Mattermost Confluence Plugin versions before 1.5.0 occurs due to improper authentication checks in the channel subscription API endpoint. The plugin fails to verify user credentials when processing requests to the `/api/v1/subscriptions/edit` endpoint, allowing unauthenticated attackers to modify channel subscription settings directly. This flaw exists in the subscription management component where the application doesn’t validate session tokens or require any form of authentication before executing subscription changes. Attackers can exploit this by sending crafted HTTP POST requests containing malicious subscription data to the vulnerable endpoint, potentially manipulating notification settings across multiple channels.
Platform: Mattermost Confluence Plugin
Version: <1.5.0
Vulnerability: Missing Authentication
Severity: High
date: Aug 12, 2025
Prediction: Patch by Aug 25, 2025
What Undercode Say:
curl -X POST http://target/api/v1/subscriptions/edit -d '{"channel_id":"malicious_data"}'
import requests
requests.post('http://target/api/v1/subscriptions/edit', json={'channel_id':'compromised'})
How Exploit:
Send unauthenticated POST requests to edit subscriptions
Protection from this CVE:
Upgrade to version 1.5.0
Impact:
Unauthorized subscription modification
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
