Vulnerabilidades do Yeti-platform Yeti

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Yeti-platform Yeti: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:yeti-platform:yeti

CVE-2024-46508 Alta · 7.5 CWE-798 08/05/2026

Use of Hard-coded Credentials em Yeti-platform Yeti

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).

CVE-2024-46507 Alta · 7.3 Exploit público CWE-94 08/05/2026

Code Injection em Yeti-platform Yeti

A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.