Yettiesoft vulnerabilities

Products

• VestCert 1

Latest Yettiesoft CVEs

Newest publication first

1. CVE-2023-45798 Yettiesoft VestCert Remote Code Execution Vulnerability

   Published 2023-10-30

   Critical·CVSS 9.8 EPSS 0.70%

   In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load arbitrary third-party modules, leading to remote code execution.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.