CVE-2021-25770: JetBrains Youtrack

Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days.

In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution.

Affected products

• JetBrains Youtrack: before 2020.5.3123 (fixed in 2020.5.3123)

Published 2021-02-03. Last modified 2026-06-17.