CVE-2025-22172

Publication date

2025-10-22 16:30:03

Family

atlassian

State

PUBLISHED

Description

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permission.