CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level.

Score
CVSS 3.1 5.4 Medium
Status
Analyzed - security@atlassian.com
Published
2025-10-22
Last modified
2026-10-08
Weaknesses
CWE-285

Affected products

References

 
 
© AVABIS GmbH privacypolicy about