Flagsmith: Security Vulnerabilities
In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.
CVSS Score
7.5
EPSS Score
0.001
Published
2024-11-17
In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.
CVSS Score
7.5
EPSS Score
0.001
Published
2024-11-17