Flagsmith

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Flagsmith records in CISA KEV

No Flagsmith vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Flagsmith · all components

TI-2024-35377 CVE-2024-52872 · GHSA-2g9x-g93g-hv56

LOW 39

In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00401 Published 2024-11-17 No fix listed

TI-2024-35376 CVE-2024-52871 · GHSA-3878-g84c-f27c

LOW 39

In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2024-11-17 No fix listed