yeti-platform

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

yeti-platform records in CISA KEV

No yeti-platform vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yeti 3 records HIGH

Records

3 records in Yeti · all components

TI-2024-31003 CVE-2024-46508

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the…

HIGH 72

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2026-05-08 No fix listed CWE-798

TI-2024-31002 CVE-2024-46507

A SSTI (server side template injection) vulnerability in the custom template export…

MEDIUM 47

A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.03919 Published 2026-05-08 No fix listed CWE-94

TI-2024-30461 CVE-2024-45412

Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack

LOW 34

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0078 Published 2024-09-10 Fixed in 2.1.11 CWE-770

Open these records in search →

Critical	0
High	8
Medium	0
Low	0
No CVSS	0