CVE-2024-52872

Summary

CVE-2024-52872 is a recently disclosed vulnerability affecting Flagsmith before version 2.134.1. This issue lies in the get_document endpoint, which fails to enforce proper permissions. An unauthorized user may exploit this vulnerability to access documents that they should not have been able to reach, potentially leading to data leakage or other malicious activities. Flagsmith is urged to apply the necessary patches to mitigate this risk. Users should also review access controls and ensure that only authorized individuals have access to sensitive data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.