CVE-2025-22168

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read the steps of another user's private checklist.

Score
CVSS 4.0 5.3 Medium
Status
Modified - security@atlassian.com
Published
2025-10-22
Last modified
2026-10-08
Weaknesses
CWE-285

Affected products

References

 
 
© AVABIS GmbH privacypolicy about