CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

Flagsmith 安全漏洞

Flagsmith is an open source, full-featured feature flagging and remote configuration service from Flagsmith Open Source. A security vulnerability exists in Flagsmith versions prior to 2.134.1 that stems from the ability to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52872

In Flagsmith versions prior to 2.134.1 , the get_document endpoint is not correctly protected by permissions. This vulnerability could potentially allow unauthorized access to documents. To remediate this issue, users are recommended to update to version 2.134.1 or later. As a temporary workaroun...

CVE-2024-52872: Undefined Security Weakness

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871: Undefined Security Weakness

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

Flagsmith 安全漏洞

Flagsmith is an open source, full-featured feature flags and remote configuration service from Flagsmith Open Source. A security vulnerability exists in Flagsmith versions prior to 2.134.1 that stems from the getdocument endpoint not being properly protected by permissions...

CVE-2024-52871

The Flagsmith feature flagging and remote configuration service is vulnerable in versions prior to 2.134.1 due to a security weakness that allows an attacker to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting. This bypass enables unauthorized registration despite intended restrictions. Remed...

CVE-2024-52872

In Flagsmith before 2.134.1, the getdocument endpoint is not correctly protected by permissions...

CVE-2024-52871

In Flagsmith before 2.134.1, it is possible to bypass the ALLOWREGISTRATIONWITHOUTINVITE setting...

PT-2024-35471 · Flagsmith · Flagsmith

Name of the Vulnerable Software and Affected Versions: Flagsmith versions prior to 2.134.1 Description: The issue allows bypassing the ALLOW REGISTRATION WITHOUT INVITE setting. Recommendations: For versions prior to 2.134.1, update to version 2.134.1 or later to resolve the issue...