CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.7. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-49221
Severity
LOW
CVSS
3.7
EPSS
0.25%
Original NVD Description
Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which allows unauthenticated attackers to access subscription details without via API call to GET subscription endpoint.
Related CVEs
Other vulnerabilities affecting the same vendor(s)