CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52872

creationtimestamp| type| source ---|---|--- 2024-11-17 03:42:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113496223252111486 2024-11-17 06:16:12+00:00| seen| https://t.me/cvedetector/11252...

CVE-2024-52872

CVE-2024-52872 affects Flagsmith prior to version 2.134.1. The vulnerability arises because the get_document endpoint is not correctly protected by permissions, potentially allowing unauthorized access to documents. The cited sources consistently state this issue for Flagsmith versions before 2.1...