Vendors / yeti-platform Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 8
Exploited now yeti-platform records in CISA KEV No yeti-platform vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00429 · Published 2026-05-08 · No fix listed CWE-798
Priority HIGH 67
Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with read access to delete access control relationships.
CVSS 4.0 HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00504 · Published 2026-09-16 · No fix listed CWE-862
Priority MEDIUM 47
A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.
CVSS 3.1 HIGH 7.3· Network · No auth · No interaction · EPSS 0.03919 · Published 2026-05-08 · No fix listed CWE-94
Priority LOW 39
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00429 · Published 2026-11-03 · Fixed in 2.5.1 CWE-306
Priority LOW 36
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
CVSS 3.1 HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00412 · Published 2026-11-03 · No fix listed CWE-22
Priority LOW 34
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0078 · Published 2024-09-10 · Fixed in 2.1.11 CWE-770
Priority LOW 33
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
CVSS 3.1 HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00256 · Published 2026-11-03 · No fix listed CWE-943
Priority LOW 31
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00405 · Published 2026-11-03 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
0 8 0 0 0
THREATIST.IORead the docs