Flagsmith

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-52872 HIGH PATCH This Week

In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Flagsmith

NVD GitHub

CVSS 3.1

7.5

EPSS

0.4%

CVE-2024-52871 HIGH PATCH This Week

In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Flagsmith

NVD GitHub

CVSS 3.1

7.5

EPSS

0.4%

CVE-2024-52872

EPSS 0% CVSS 7.5

HIGH PATCH This Week

In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Flagsmith

NVD GitHub

CVE-2024-52871

EPSS 0% CVSS 7.5

HIGH PATCH This Week

In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Flagsmith

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy