CVE-2022-24442

CRITICAL 9.8CVE-2022-24442 · Published 25/02/2022 · updated 17/06/2026

In short

CVE-2022-24442 is a CRITICAL (CVSS 9.8) vulnerability affecting youtrack (jetbrains).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 89.9% of all vulnerabilities.
Fix: update to 2021.4.40426 or later.

Package	Affected versions	Patched versions
youtrack jetbrains	`< 2021.4.40426`	`2021.4.40426`

JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.