Priority LOW 31
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
Vulnerabilities
8 records
Priority LOW 36
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
Priority LOW 39
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
Priority LOW 33
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.
TI-2026-62524 CVE-2026-92783 · GHSA-w297-93hv-q3cx
Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletion
Priority HIGH 67
Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with read access to delete access control relationships.
TI-2024-31003 CVE-2024-46508
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the…
Priority HIGH 72
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).
TI-2024-31002 CVE-2024-46507
A SSTI (server side template injection) vulnerability in the custom template export…
Priority MEDIUM 47
A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.
TI-2024-30461 CVE-2024-45412
Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack
Priority LOW 34
Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline.