CVE-2025-22178

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the "Why" page.

Score
CVSS 4.0 5.3 Medium
Status
Analyzed - security@atlassian.com
Published
2025-10-22
Last modified
2026-10-08
Weaknesses
CWE-285, CWE-862

Affected products

References

 
 
© AVABIS GmbH privacypolicy about