CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52872

creationtimestamp| type| source ---|---|--- 2024-11-17 03:42:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113496223252111486 2024-11-17 06:16:12+00:00| seen| https://t.me/cvedetector/11252...

CVE-2024-52872

In Flagsmith versions prior to 2.134.1 , the get_document endpoint is not correctly protected by permissions. This vulnerability could potentially allow unauthorized access to documents. To remediate this issue, users are recommended to update to version 2.134.1 or later. As a temporary workaroun...