Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-l

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
atlassian

Description

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Atlassian Jira Align

  • < 11.14.0unaffected
  • >= 11.14.0affected
  • >= 11.14.1affected
  • >= 11.15.0affected
  • >= 11.15.1affected
  • >= 11.16.0affected
  • >= 11.16.1unaffected

References