CVE-2022-24442: JetBrains Youtrack

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

Affected products

• JetBrains Youtrack: before 2021.4.40426 (fixed in 2021.4.40426)

Published 2022-02-25. Last modified 2026-06-17.