jira_align vulnerabilities
CVEs whose affected-version data names the jira_align package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
11 CVEsRSS
CVE-2025-22178Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the "Why" page.
CVE-2025-22177Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view other team overviews.
CVE-2025-22176Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view audit log items.
CVE-2025-22175Medium· 5.4Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's …
CVE-2025-22174Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view portfolio rooms without the re…
CVE-2025-22173Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without th…
CVE-2025-22172Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the r…
CVE-2025-22171Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.
CVE-2025-22170Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the a…
CVE-2025-22169Medium· 5.4Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without…
CVE-2025-22168Medium· 4.3Jira Align is vulnerable to an authorization issue
Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read the steps of another user's pr…