Security Advisory

CVE-2024-12048

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-03-20 10:11:27

Last updated 2025-03-20 13:04:08

Assigner @huntr_ai

CVSS score 8.8

State PUBLISHED

Description

An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly check authorization for multiple API endpoints, allowing attackers to view, edit, and delete other users' information without proper authorization. Affected endpoints include but are not limited to /get/project/{project_id}, /get/schedule_data/{agent_id}, /delete/{agent_id}, /get/organisation/{organisation_id}, and /get/user/{user_id}.

← Browse all CVEs View on cve.org ↗