Site icon API Security Blog

GHSA-RFG4-2M63-FW2Q Mattermost Confluence Plugin has Missing Authorization vulnerability

image
Mattermost Confluence Plugin versions < 1.5.0 fail to enforce authentication of the user to the Mattermost instance, which allows unauthenticated attackers to access subscription details via an API call to the GET subscription…Read More

Exit mobile version