CVE-2025-52931

Publication date

2025-08-11 18:57:00

Family

Mattermost

State

PUBLISHED

Description

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body.