Atlassian Jira Align

• CVE-2025-22178 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2025-22169 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2025-22173 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2025-22170 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with s 0.2%
• CVE-2025-22174 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2025-22172 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2025-22176 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2025-22171 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users. 0.2%
• CVE-2025-22168 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2025-22177 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2025-22175 Medium 5.3 Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able t 0.2%
• CVE-2022-36803 High 8.8 The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An authenticated attacker with the People role permission to use the MasterUserEdit API to modify any users role to 0.7%
• CVE-2022-36802 Medium 4.9 The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery. This 1.0%