← CVE Intelligence

CVE-2025-22168

Atlassian / Jira Align PUBLISHED

Description (CNA)

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read the steps of another user's private checklist.

Affected (CNA)

Vendor / productVersions
Atlassian / Jira Alignunaffected < 11.14.0; affected >= 11.14.0; affected >= 11.14.1; affected >= 11.15.0; affected >= 11.15.1; affected >= 11.16.0; unaffected >= 11.16.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.