Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-52871
7.5
HIGHCVSS v3
Published
November 17, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.
Flagsmith/flagsmith
GitHubFlagsmith is an open source feature flagging and remote config service. Self-host or use our hosted version at https://app.flagsmith.com.
GitHubFlagsmith is an open source feature flagging and remote config service. Self-host or use our hosted version at https://app.flagsmith.com.< 2.134.1NVD