CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52872

creationtimestamp| type| source ---|---|--- 2024-11-17 03:42:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113496223252111486 2024-11-17 06:16:12+00:00| seen| https://t.me/cvedetector/11252...

CVE-2024-52872

In Flagsmith versions prior to 2.134.1 , the get_document endpoint lacks proper permission protections. This vulnerability could allow unauthorized access to documents. To remediate this issue, users should update to version 2.134.1 or later. As a temporary workaround, organizations should consid...