Vulnerabilidades de Yeti-platform
CVEs publicadas que afetam produtos de Yeti-platform: 2 registro(s), com severidade, exploração e correções.
CVE-2024-46508
Alta · 7.5
CWE-798 08/05/2026
Use of Hard-coded Credentials em Yeti-platform Yeti
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).
CVE-2024-46507
Alta · 7.3
Exploit público CWE-94 08/05/2026
Code Injection em Yeti-platform Yeti
A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.