CVE-2024-46508

creationtimestamp| type| source ---|---|--- 2026-05-08 09:10:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldf4rg56e2k...

CVE-2024-46508

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed by setting YETIAUTHSECRETKEY to a value other than SECRET...

CVE-2024-46508

CVE-2024-46508 affects yeti-platform yeti before 2.1.12. The issue allows an attacker to generate valid JWT tokens if YETI_AUTH_SECRET_KEY remains at the default SECRET. CVSS v3.1 base score 7.5 (High) with Network attack vector and no privileges required. Root cause: secret key used for JWT sign...

Exploit for CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, w...