漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Exposure of Sensitive Information in transformeroptimus/superagi
Vulnerability Description
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The `/get/organisation/` endpoint does not verify the user's organization, allowing any authenticated user to retrieve sensitive configuration details, including API keys, of any organization. This could lead to unauthorized access to services and significant data breaches or financial loss.
CVSS Information
N/A
Vulnerability Type
CWE-1230
Vulnerability Title
SuperAGI 安全漏洞
Vulnerability Description
SuperAGI是SuperAGI开源的一个开源基础设施应用程序。用于构建组件、工具、框架和模型以实现开源 AGI。 SuperAGI存在安全漏洞，该漏洞源于/get/organisation/端点未验证用户组织，可能导致敏感配置信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A