CVE-2024-9431

High

In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system,…

@huntr_ai·CWE-620·Published 2025-03-20

CVSS

8.8

EPSS

0.01

KEV

Exploits

cve.orgen

224 chars

In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After logging into the system, users can change the passwords of other users, leading to potential account takeover.

NVDen

224 chars

NVDes

258 chars

En la versión v0.0.14 de transformeroptimus/superagi, existe una vulnerabilidad de gestión de privilegios incorrecta. Tras iniciar sesión en el sistema, los usuarios pueden cambiar las contraseñas de otros usuarios, lo que podría provocar el robo de cuentas.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	6.5	—	—	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
3.0	Primary	cve.org	6.5	—	—	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
3.0	Secondary	NVD	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H