CVE-2025-54458

CVE-2025-54458 describes a medium-severity access control bypass vulnerability in Mattermost Confluence Plugin versions prior to 1.5.0. An authenticated attacker can exploit this flaw to subscribe to Confluence spaces they lack authorized access to, potentially leading to information disclosure. The attack requires low privileges and network access, but has no known public exploits, active exploitation, or significant community discussion.