CVE-2025-53514 in Confluence Plugin

Riassunto

di MITRE • 11/08/2025

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to server webhook endpoint with an invalid request body.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: Mattermost
• Prenotare: 28/07/2025
• Divulgazione: 11/08/2025
• Moderazione: accettato
• Voce: VDB-319465
• CPE: pronto
• CWE: CWE-754 (confermato)
• CVSS: 5.9 (CNA)
• EPSS: 0.00264
• KEV: no
• Attività: molto basso
• Settore: Transportation, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-53514
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-53514
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-53514/