High severity7.3NVD Advisory· Published May 8, 2026· Updated May 8, 2026
CVE-2024-46507
CVE-2024-46507
Description
A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.
Affected products
2<2.1.12+ 1 more
- (no CPE)range: <2.1.12
- cpe:2.3:a:yeti-platform:yeti:*:*:*:*:*:*:*:*range: >=2.0,<2.1.12
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.