CVE-2022-24442

JetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-02-25

Last modified

2024-08-03

Weaknesses

CWE-94

Affected products

• Youtrack (Jetbrains)

References

• https://blog.jetbrains.com
• https://www.jetbrains.com/privacy-security/issues-fixed/