Yeti (< 2.5.1)

An authenticated low-privileged user can exploit a path traversal vulnerability in the Yeti Forensics Intelligence platform to write content with a .yaml suffix outside the intended archive directory.

The YETI Forensics Intelligence platform prior to version 2.5.1 contains an authentication bypass vulnerability allowing unauthenticated attackers to retrieve sensitive audit logs via the API.