Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: yeti-platform'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2024-46508 7.5 yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET). 2026-05-08 19:58:25
CVE-2024-46507 7.3 A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server. 2026-05-08 19:52:49
CVE-2024-45412 7.5 Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Remote user-controlled data tags can reach a Unicode normalization with a compatibility form NFKD. Under Windows, such normalization 2024-09-20 16:32:52
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/1
Zapisa po stranici: