Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-22170 EUVD-2025-35601GHSA-j48g-f46f-j274

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they i…

Published Oct 22, 2025 · Updated Oct 22, 2025 · Assigned by atlassian

Description

Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action.

Affected products

VendorProductAffectedFixed
Atlassian Jira Align >= 11.14.0, >= 11.14.1, >= 11.15.0, >= 11.15.1, >= 11.16.0 < 11.14.0

References