PatchSiren

Yeti Platform CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Yeti Platform CVE published 2026-05-08

CVE-2024-46507

CVE-2024-46507 is a server-side template injection vulnerability in the custom template export function of Yeti Platform's Yeti product before version 2.1.12. An attacker can exploit this vulnerability to execute code on the application server. The CVSS score is 7.3, indicating a high severity vulnerability. Defenders responsible for Yeti Platform Yeti deployments should assess exposure and prioritize pat [truncated]