Listen to this Post
The CVE-2025-XXXXX vulnerability in Mattermost Confluence Plugin versions before 1.5.0 allows unauthenticated attackers to create unauthorized channel subscriptions through API calls. The plugin fails to implement proper authentication checks when handling requests to the ‘/create-channel-subscription’ endpoint. Attackers can exploit this by sending crafted POST requests to this endpoint without valid session tokens or credentials. The system processes these requests as if they came from authenticated users, creating subscriptions that forward Confluence content to specified Mattermost channels. This flaw exists due to missing authorization middleware in the subscription creation handler function.
Platform: Mattermost Confluence Plugin
Version: <1.5.0
Vulnerability: Missing Authentication
Severity: High
date: Aug 11, 2025
Prediction: Patch by Aug 25, 2025
What Undercode Say:
POST /plugins/com.mattermost.confluence/create-channel-subscription
HTTP/1.1 200 OK
{"channel_id":"target_channel","space_key":"confluence_space"}
How Exploit:
1. Identify target Mattermost instance
2. Craft unauthenticated POST request
3. Specify target channel and Confluence space
4. Execute API call to create subscription
Protection from this CVE:
1. Upgrade to v1.5.0
2. Implement API authentication
3. Add authorization middleware
Impact:
1. Unauthorized data exposure
2. Spam channel subscriptions
3. Information leakage
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
