CVE-2025-13523

HIGH

7.7

Description

Mattermost Confluence plugin version <1.7.0 fails to properly escape user-controlled display names in HTML template rendering which allows authenticated Confluence users with malicious display names to execute arbitrary JavaScript in victim browsers via sending a specially crafted OAuth2 connection link that, when visited, renders the attacker's display name without proper sanitization. Mattermost Advisory ID: MMSA-2025-00557

CVE Details

CVSS v3.1 Score7.7

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

Attack VectorNETWORK

ComplexityHIGH

Privileges RequiredLOW

User InteractionREQUIRED

Published2/6/2026

Last Modified2/24/2026

Sourcenvd

Honeypot Sightings0

Affected Products

mattermost:confluence

Weaknesses (CWE)

CWE-79

References

https://mattermost.com/security-updates(responsibledisclosure@mattermost.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.