CVE-2024-46508

The yeti-platform yeti prior to version 2.1.12 is vulnerable to a trust management issue (CVE-2024-46508). This vulnerability allows attackers to generate valid JWT tokens because the YETI_AUTH_SECRET_KEY is not changed from its default value (SECRET). Exploitation of this flaw can lead to authen...