Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-22173

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-l

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
atlassian

Description

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Atlassian Jira Align

  • < 11.14.0unaffected
  • >= 11.14.0affected
  • >= 11.14.1affected
  • >= 11.15.0affected
  • >= 11.15.1affected
  • >= 11.16.0affected
  • >= 11.16.1unaffected

References