CVE-2024-10267

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can leak sensitive user information, including names, emails, and passwords, by attempting to register a new account with an email that is already in use. The server returns all information associated with the existing account. The vulnerable endpoint is located in the user registration functionality.

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can leak sensitive user information, including names, emails, and passwords, by attempting to register a new account with an email that is already in use. The server returns all information associated with the existing account. The vulnerable endpoint is located in the user registration functionality.

Existe una vulnerabilidad de divulgación de información en la última versión de transformeroptimus/superagi. Un atacante puede filtrar información confidencial del usuario, como nombres, correos electrónicos y contraseñas, al intentar registrar una nueva cuenta con un correo electrónico ya utilizado. El servidor devuelve toda la información asociada a la cuenta existente. El endpoint vulnerable se encuentra en la función de registro de usuarios.