Authorization Issue in Jira Align Affects User Data Privacy
CVE-2025-22171

5.3MEDIUM

Key Information:

Vendor

Atlassian
Status
Jira Align
Vendor
CVE Published:
22 October 2025

What is CVE-2025-22171?

Jira Align is affected by a significant authorization vulnerability that allows low-privilege users to manipulate the private checklists belonging to other users. This flaw could lead to unauthorized access and alteration of sensitive user data, compromising the integrity and privacy of user information within the platform. Immediate attention to this security issue is recommended to prevent potential exploitation.

Affected Version(s)

Jira Align >= 11.14.0 < 11.14.0

Jira Align >= 11.14.1 >= 11.14.1

Jira Align >= 11.15.0 >= 11.15.0

References

https://jira.atlassian.com/browse/JIRAALIGN-8640

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Frank Lycops, NATO Cyber Security Centre
JSON
.
CVE-2025-22171 : Authorization Issue in Jira Align Affects User Data Privacy