Description
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).
High · 7.5
CVE-2024-46508
EUVD-2024-55571
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KE…
Published May 8, 2026 · Updated May 8, 2026 · Assigned by mitre