CVE-2025-22173: Medium severity Atlassian Jira Align vulnerability
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22173?
CVE-2025-22173 is classified as a low severity vulnerability.
How do I fix CVE-2025-22173?
To fix CVE-2025-22173, ensure that proper authorization checks are implemented for user roles within Jira Align.
Who is affected by CVE-2025-22173?
Any low-privilege users of Atlassian Jira Align may be affected by CVE-2025-22173.
What type of information is disclosed by CVE-2025-22173?
CVE-2025-22173 allows low-privilege users to access certain sensitive sprint data without the necessary permissions.
What actions should I take if I am affected by CVE-2025-22173?
If affected by CVE-2025-22173, review user permissions and update access controls to mitigate unauthorized data visibility.