CVE-2025-22173

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission.

Score
CVSS 4.0 5.3 Medium
Status
Analyzed - security@atlassian.com
Published
2025-10-22
Last modified
2026-10-08
Weaknesses
CWE-285

Affected products

References

 
 
© AVABIS GmbH privacypolicy about