Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-22171 EUVD-2025-35605GHSA-wjmx-g8v6-8x9w

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.

Published Oct 22, 2025 · Updated Oct 23, 2025 · Assigned by atlassian

Vendor: Atlassian Product: Jira Align Category: Web / CMS

Description

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.

Affected products

VendorProductAffectedFixed
Atlassian Jira Align >= 11.14.0, >= 11.14.1, >= 11.15.0, >= 11.15.1, >= 11.16.0 < 11.14.0

References