CVE-2024-12048 — IDOR Vulnerability in transformeroptimus/superagi
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly check authorization for multipl…
Published: 2025-03-20 · CVSS: 8.8 · CVSS 3.0
An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly check authorization for multiple API endpoints, allowing attackers to view, edit, and delete other users' information without proper authorization. Affected endpoints include but are not limited to /get/project/{project_id}, /get/schedule_data/{agent_id}, /delete/{agent_id}, /get/organisation/{organisation_id}, and /get/user/{user_id}.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7