high7.5
CVE-2024-46508
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other t…
Impact
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yeti-Platform | Yeti | from 2.0 before 2.1.12 |