CVE-2024-46507
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Yeti Platform是Yeti Platform开源的一个日常威胁情报平台。 Yeti Platform 2.1.12之前版本存在代码注入漏洞，该漏洞源于自定义模板导出功能中的服务器端模板注入，可能导致攻击者在应用服务器上执行代码。
Public Exploits 1
Nuclei · 1
CVE-2024-46507.yaml [template]
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-46507
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Yeti Platform 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Yeti Platform是Yeti Platform开源的一个日常威胁情报平台。 Yeti Platform 2.1.12之前版本存在代码注入漏洞，该漏洞源于自定义模板导出功能中的服务器端模板注入，可能导致攻击者在应用服务器上执行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2024-46507
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | build-script for CVE-2024-46507 and CVE-2024-46508 | https://github.com/Somchandra17/CVE-2024-46507 | POC Details |
| 2 | The Yeti Platform < 2.1.12 contains a Server-Side Template Injection (SSTI) vulnerability that can lead to Remote Code Execution (RCE) when exploited by an authenticated user. Attackers with valid credentials can inject malicious template expressions, which the server evaluates, allowing arbitrary command execution. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46507.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-46507
请登录查看更多情报信息。
Security Blog Posts for CVE-2024-46507 (1)
Same Patch Batch · n/a · 2026-05-08 · 40 CVEs total
| CVE-2026-8127 | 6.3 MEDIUM | eladmin Users API Endpoint UserController.java checkLevel access control |
| CVE-2026-8123 | 4.3 MEDIUM | Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais denial of service |
| CVE-2026-8122 | 4.3 MEDIUM | Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_names denial of service |
| CVE-2026-8121 | 4.3 MEDIUM | Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of service |
| CVE-2026-8120 | 4.3 MEDIUM | Open5GS NSSF nnssf-handler.c denial of service |
| CVE-2026-8124 | 3.3 LOW | GPAC box_code_base.c sidx_box_read allocation of resources |
| CVE-2026-8119 | 3.3 LOW | Open5GS NSSF nghttp2-server.c ogs_sbi_stream_find_by_id denial of service |
| CVE-2025-67886 | Bitrix24 代码问题漏洞 | |
| CVE-2025-67888 | Control Web Panel 操作系统命令注入漏洞 | |
| CVE-2025-69690 | pfSense 安全漏洞 | |
| CVE-2025-69691 | pfSense 安全漏洞 | |
| CVE-2025-69599 | RayVentory Scan Engine 安全漏洞 | |
| CVE-2025-55449 | AstrBot 安全漏洞 | |
| CVE-2023-46453 | GL.iNet Router 安全漏洞 | |
| CVE-2026-38361 | dash-uploader 资源管理错误漏洞 | |
| CVE-2026-37431 | Beauty Parlour Management System SQL注入漏洞 | |
| CVE-2026-38360 | dash-uploader 路径遍历漏洞 | |
| CVE-2026-29972 | nanoMODBUS 安全漏洞 | |
| CVE-2026-29975 | Lightweight JSON text parser 安全漏洞 | |
| CVE-2026-29974 | minmea 安全漏洞 |
Showing top 20 of 40 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2024-46507
No comments yet