high7.5
CVE-2024-52871
In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.
Impact
In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flagsmith | Flagsmith | before 2.134.1 |