CVE-2024-10267
Information Disclosure in transformeroptimus/superagi
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Information Disclosure in transformeroptimus/superagi
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can leak sensitive user information, including names, emails, and passwords, by attempting to register a new account with an email that is already in use. The server returns all information associated with the existing account. The vulnerable endpoint is located in the user registration functionality.
Reserved 2024-10-22 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_aiCWE-359 Exposure of Private Personal Information to an Unauthorized Actor
huntr.com/bounties/13da8366-4670-4d46-9f5a-ba3f642b692e
Support options
