Advisories · Technology
yeti.
Every CVE that names yeti among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export
- yeti
- Path traversal
- CVSS 8.3 High
Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write
- yeti
- Path traversal
- CVSS 7.5 High
Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data
- yeti
- Authentication bypass
- CVSS 7.6 High
Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters
- yeti
- Other injection
- CVSS 7.2 High
Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletion
- yeti
- Broken access control
- CVSS 5.3 Medium
Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack
- yeti
- Denial of service