Improper Check for Unusual or Exceptional Conditions Affecting github.com/mattermost/mattermost-plugin-confluence/server/serializer package, versions <1.5.0-rc1


Severity

Recommended
0.0
high
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.04% (11th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-GOLANG-GITHUBCOMMATTERMOSTMATTERMOSTPLUGINCONFLUENCESERVERSERIALIZER-11800944
  • published14 Aug 2025
  • disclosed11 Aug 2025
  • creditUnknown

Introduced: 11 Aug 2025

NewCVE-2025-52931  (opens in a new tab)
CWE-754  (opens in a new tab)

How to fix?

Upgrade github.com/mattermost/mattermost-plugin-confluence/server/serializer to version 1.5.0-rc1 or higher.

Overview

Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions due to improper handling of unexpected request bodies in the update channel subscription endpoint. An attacker can cause the plugin to crash by repeatedly sending invalid request bodies to this endpoint.

CVSS Base Scores

version 4.0
version 3.1