Denial of Service Vulnerability in Mattermost Confluence Plugin
CVE-2025-54463

5.9MEDIUM

Key Information:

Vendor

Mattermost
Status
Mattermost Confluence Plugin
Vendor
CVE Published:
11 August 2025

What is CVE-2025-54463?

The Mattermost Confluence Plugin prior to version 1.5.0 is prone to a denial of service vulnerability due to improper handling of unexpected request bodies. This flaw enables attackers to exhaust server resources by continuously sending invalid requests to the webhook endpoint, potentially leading to a crash of the plugin and service outages.

Affected Version(s)

Mattermost Confluence Plugin 0 < 1.5.0

Mattermost Confluence Plugin 1.5.0

References

https://mattermost.com/security-updates

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lorenzo Gallegos
.
CVE-2025-54463 : Denial of Service Vulnerability in Mattermost Confluence Plugin