BaseFortify

Publication date: 2025-10-22

Last updated on: 2025-10-24

Assigner: Atlassian

Description

Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-22

Last Modified

2025-10-24

Generated

2026-07-06

AI Q&A

2025-10-22

EPSS Evaluated

2026-07-05

NVD

CVE-2025-22171

Affected Vendors & Products

Vendor	Product	Version / Range
atlassian	jira_align	From 11.14.0 (inc) to 11.16.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Impact Analysis

The vulnerability can impact you by allowing unauthorized users with low privileges to modify private checklists of other users, potentially leading to data integrity issues or unauthorized changes in project management information.

Executive Summary

This vulnerability in Jira Align allows a low-privilege user to alter the private checklists of other users due to an authorization issue.

Hi! I’m here to help you understand CVE-2025-22171. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70