What is GHSA-qjrx-j8wm-xf83?

GHSA-qjrx-j8wm-xf83 is a security advisory published by GitHub Security Advisories with Medium severity. Mattermost Confluence Plugin has Missing Authorization vulnerability

Which CVE IDs does GHSA-qjrx-j8wm-xf83 cover?

GHSA-qjrx-j8wm-xf83 covers the following CVE IDs: CVE-2025-8285. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qjrx-j8wm-xf83?

GHSA-qjrx-j8wm-xf83 has a CVSS v3 base score of 4.0, published by GitHub Security Advisories.

Which products are affected by GHSA-qjrx-j8wm-xf83?

GHSA-qjrx-j8wm-xf83 affects 1 product, including: go/github.com/mattermost/mattermost-plugin-confluence:\u003c 1.5.0.

GHSA-qjrx-j8wm-xf83MediumCVSS 4.0

Mattermost Confluence Plugin has Missing Authorization vulnerability

Vendor

GitHub Security Advisories

Published

August 11, 2025

Last Modified

September 24, 2025

🔗 CVE IDs covered (1)

CVE-2025-8285 →

📋 Description

Mattermost Confluence Plugin versions < 1.5.0 fail to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API call to the create channel subscription endpoint.

🎯 Affected products1

go/github.com/mattermost/mattermost-plugin-confluence:< 1.5.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-8285
https://mattermost.com/security-updates
https://pkg.go.dev/vuln/GO-2025-3868
https://github.com/advisories/GHSA-qjrx-j8wm-xf83