Mattermost Confluence Plugin Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Mattermost Confluence Plugin, version prior to 1.5.0. The issue arises because the plugin fails to properly manage unexpected request bodies. This flaw allows attackers to crash the plugin by repeatedly sending invalid request bodies to the channel subscription update endpoint.

Impact

Exploitation of this vulnerability leads to a crash of the Confluence plugin, causing a denial-of-service condition where the plugin becomes unresponsive or unavailable.

Remediation

Users can upgrade to Mattermost Confluence Plugin version 1.5.0 or later to address this vulnerability.