High severity7.3NVD Advisory· Published May 8, 2026· Updated May 8, 2026
CVE-2024-46507
CVE-2024-46507
Description
A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:yeti-platform:yeti:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:yeti-platform:yeti:*:*:*:*:*:*:*:*range: >=2.0,<2.1.12
- (no CPE)range: <2.1.12
Patches
Vulnerability mechanics
References
1- rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.