CVE-2025-44004 | Mattermost Confluence Plugin up to 1.4.x Create Channel Subscription Endpoint missing authentication

August 11, 2025 Yanac

A vulnerability was found in Mattermost Confluence Plugin up to 1.4.x. It has been declared as critical. This vulnerability affects unknown code of the component Create Channel Subscription Endpoint. The manipulation leads to missing authentication.

This vulnerability was named CVE-2025-44004. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More