CVE-2021-43185: JetBrains Youtrack

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.

Affected products

  • JetBrains Youtrack: before 2021.3.23639 (fixed in 2021.3.23639)

Published 2021-11-09. Last modified 2026-06-17.