In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Flagsmith/flagsmith/compare/v2.134.0...v2.134.1 | Patch |
| https://github.com/Flagsmith/flagsmith/pull/4454 | Patch Issue Tracking |
Configurations
History
07 Jul 2025, 18:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Flagsmith/flagsmith/compare/v2.134.0...v2.134.1 - Patch | |
| References | () https://github.com/Flagsmith/flagsmith/pull/4454 - Patch, Issue Tracking | |
| CPE | cpe:2.3:a:flagsmith:flagsmith:*:*:*:*:*:*:*:* | |
| First Time |
Flagsmith
Flagsmith flagsmith |
|
| CWE | NVD-CWE-noinfo |
17 Nov 2024, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-17 04:15
Updated : 2025-07-07 18:01
NVD link : CVE-2024-52871
Mitre link : CVE-2024-52871
JSON object : View
Products Affected
flagsmith
- flagsmith
CWE