Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-22172

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-l

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
atlassian

Description

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permission.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Atlassian Jira Align

  • < 11.14.0unaffected
  • >= 11.14.0affected
  • >= 11.14.1affected
  • >= 11.15.0affected
  • >= 11.15.1affected
  • >= 11.16.0affected
  • >= 11.16.1unaffected

References