CVE-2024-46508

creationtimestamp| type| source ---|---|--- 2026-05-08 09:10:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mldf4rg56e2k 2026-10-02 04:07:28+00:00| published-proof-of-concept| Telegram/pMreYdpqo-HmUhg5IdBCQKvwBSDIAtZ4tWxYFEhplPDtuI 2026-10-02 04:07:28+00:00| seen|...

CVE-2024-46508

The yeti-platform (versions prior to 2.1.12 ) is vulnerable to an authentication bypass and privilege escalation flaw due to the use of hardcoded credentials . Specifically, the system allows attackers to generate valid JWT tokens without changing the YETI_AUTH_SECRET_KEY. Exploiting this vulnera...

CVE-2024-46508

yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed by setting YETIAUTHSECRETKEY to a value other than SECRET...

Exploit for CVE-2024-46507

The script was tested and built on Ubuntu Server 20.04 LTS, w...