CVE-2024-46508

creationtimestamp| type| source ---|---|--- 2026-05-08 09:10:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldf4rg56e2k...

CVE-2024-46508

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed by setting YETIAUTHSECRETKEY to a value other than SECRET...

CVE-2024-46508

The yeti-platform yeti prior to version 2.1.12 is vulnerable to a trust management issue (CVE-2024-46508). This vulnerability allows attackers to generate valid JWT tokens because the YETI_AUTH_SECRET_KEY is not changed from its default value (SECRET). Exploitation of this flaw can lead to authen...

Exploit for CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, w...