In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Flagsmith/flagsmith/compare/v2.134.0...v2.134.1 | Patch |
| https://github.com/Flagsmith/flagsmith/pull/4459 | Patch Issue Tracking |
Configurations
History
07 Jul 2025, 17:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Flagsmith/flagsmith/pull/4459 - Patch, Issue Tracking | |
| References | () https://github.com/Flagsmith/flagsmith/compare/v2.134.0...v2.134.1 - Patch | |
| CWE | NVD-CWE-noinfo | |
| First Time |
Flagsmith
Flagsmith flagsmith |
|
| CPE | cpe:2.3:a:flagsmith:flagsmith:*:*:*:*:*:*:*:* |
17 Nov 2024, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-17 04:15
Updated : 2025-07-07 17:59
NVD link : CVE-2024-52872
Mitre link : CVE-2024-52872
JSON object : View
Products Affected
flagsmith
- flagsmith
CWE