Authorization Flaw in Jira Align by Atlassian

CVE-2025-22169

What is CVE-2025-22169?

Jira Align is affected by an authorization flaw that permits low-privilege users to access unexpected endpoints, potentially leading to the exposure of sensitive information. Specifically, users without appropriate permissions may be able to subscribe to items or objects within the system, which undermines the intended access controls. This vulnerability highlights the need for enhanced security measures within the application to protect sensitive data and ensure that authorization levels are effectively managed.

References