Description
Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Atlassian | Jira Align | >= 11.14.0, >= 11.14.1, >= 11.15.0, >= 11.15.1, >= 11.16.0 | < 11.14.0 |