Every CVE whose affected-product data names Yeti-platform Yeti, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2024-46508 — CVSS 7.5 (high): yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting…
CVE-2024-46507 — CVSS 7.3 (high): A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows…
CVE-2024-45412 — CVSS 5.3 (medium): Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Remote user-controlled…