Mattermost Confluence Plugin has Missing Authorization vulnerability

Victor Test

9 months ago

Mattermost Confluence Plugin versions < 1.5.0 fail to check user access to the channel, allowing attackers to create a channel subscription without proper access to the channel via an API call to the edit channel subscription…Read More