CVE-2024-9447

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The "/get/organisation/" endpoint does not verify the user's organization, allowing any authenticated user to retrieve sensitive configuration details, including API keys, of any organization. Thi...

CVE-2024-9447: Exposure of Sensitive Information Through Metadata

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The /get/organisation/ endpoint does not verify the user's organization, allowing any authenticated user to retrieve sensitive configuration details, including API keys, of any organization. This...