CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

Flagsmith 安全漏洞

Flagsmith is an open source, full-featured feature flagging and remote configuration service from Flagsmith Open Source. A security vulnerability exists in Flagsmith versions prior to 2.134.1 that stems from the ability to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52872: Undefined Security Weakness

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871: Undefined Security Weakness

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52872

In Flagsmith versions prior to 2.134.1 , the get_document endpoint lacks proper permission protections. This vulnerability could allow unauthorized access to documents. To remediate this issue, users should update to version 2.134.1 or later. As a temporary workaround, organizations should consid...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52871

The Flagsmith feature flagging and remote configuration service is vulnerable in versions prior to 2.134.1 due to a security weakness that allows an attacker to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting. This bypass enables unauthorized registration despite intended restrictions. Remed...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

Flagsmith 安全漏洞

Flagsmith is an open source, full-featured feature flags and remote configuration service from Flagsmith Open Source. A security vulnerability exists in Flagsmith versions prior to 2.134.1 that stems from the getdocument endpoint not being properly protected by permissions...

PT-2024-35471 · Flagsmith · Flagsmith

Name of the Vulnerable Software and Affected Versions: Flagsmith versions prior to 2.134.1 Description: The issue allows bypassing the ALLOW REGISTRATION WITHOUT INVITE setting. Recommendations: For versions prior to 2.134.1, update to version 2.134.1 or later to resolve the issue...