Mattermost Confluence Plugin has Missing Authorization vulnerability

Victor Test

9 months ago

Mattermost Confluence Plugin versions < 1.5.0 fail to enforce authentication of the user to the Mattermost instance, which allows unauthenticated attackers to access subscription details via an API call to the GET subscription…Read More