LOW3.5Go
GHSA-4fp6-574p-fc35· BIT-mattermost-2024-23319, CVE-2024-23319Mattermost Jira Plugin vulnerable to Cross-Site Request Forgery
Modified: 3/18/2024
package
Go/github.com/mattermost/mattermost-plugin-jira
pkg:go/github.com/mattermost/mattermost-plugin-jira
LOW3.4Go
GHSA-qr8f-cjw7-838m· BIT-mattermost-2024-24774, CVE-2024-24774Mattermost Jira Plugin does not properly check security levels
Modified: 11/18/2024
HIGH7.2Go
GHSA-qvmc-92vg-6r35· CVE-2025-14273, GO-2026-4275Mattermost with Jira plugin enabled has Incorrect Implementation of Authentication Algorithm
Modified: 2/3/2026
—Go
GO-2024-2539· BIT-mattermost-2024-23319, CVE-2024-23319Cross-site request forgery via logout button in github.com/mattermost/mattermost-plugin-jira
Modified: 7/9/2024
—Go
GO-2024-2540· BIT-mattermost-2024-24774, CVE-2024-24774Mattermost Jira Plugin does not properly check security levels in github.com/mattermost/mattermost-plugin-jira
Modified: 7/9/2024
—Go
GO-2026-4275· CVE-2025-14273, GHSA-qvmc-92vg-6r35Mattermost with Jira plugin enabled has Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-plugin-jira
Modified: 3/3/2026