CVE-2025-22175

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private checklist.

Score
CVSS 3.1 5.4 Medium
Status
Modified - security@atlassian.com
Published
2025-10-22
Last modified
2026-10-08
Weaknesses
CWE-285

Affected products

References

 
 
© AVABIS GmbH privacypolicy about