Vulnerabilities

TI-2024-31003 CVE-2024-46508

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the…

HIGH 72

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00429 Published 2026-05-08 No fix listed CWE-798

TI-2024-31002 CVE-2024-46507

A SSTI (server side template injection) vulnerability in the custom template export…

MEDIUM 47

A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.03919 Published 2026-05-08 No fix listed CWE-94

TI-2024-30461 CVE-2024-45412

Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack

LOW 34

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0078 Published 2024-09-10 Fixed in 2.1.11 CWE-770

Vulnerabilities

Filters

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the…

A SSTI (server side template injection) vulnerability in the custom template export…

Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack