← Back

Flagsmith

flagsmith

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Flagsmith
flagsmith
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-52872
1Flagsmith
1Flagsmith
Jun 17, 2026
Nov 17, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.
CVE-2024-52871
1Flagsmith
1Flagsmith
Jun 17, 2026
Nov 17, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.