← Back

Flagsmith

flagsmith

Vendor: Flagsmith • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-52872
1Flagsmith
1Flagsmith
Jun 17, 2026
Nov 17, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.
CVE-2024-52871
1Flagsmith
1Flagsmith
Jun 17, 2026
Nov 17, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.