CVE-2024-9431 — Improper Privilege Management in transformeroptimus/superagi

CVE-2024-9431

Improper Privilege Management in transformeroptimus/superagi PUBLISHED

Description (CNA)

In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system, users can change the passwords of other users, leading to potential account takeover.

Affected (CNA)

Vendor / product	Versions
transformeroptimus / transformeroptimus/superagi	affected unspecified through latest

CWE

CWE-620

References

https://huntr.com/bounties/9b33d7c1-ed0a-4f5b-a378-694570fd990b

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.