Authorization Vulnerability in Jira Align by Atlassian

CVE-2025-22172

What is CVE-2025-22172?

Jira Align has been identified with an authorization vulnerability that allows low-privilege users to access sensitive endpoints, which can inadvertently disclose limited sensitive information. Notably, this misconfiguration enables users with insufficient permissions to view external reports that should be restricted, posing a risk of exposing confidential data. Proper access controls are essential to prevent unauthorized information access in affected versions.

References