transformeroptimus Superagi Information Disclosure Vulnerability

A vulnerability allowing information disclosure exists in the latest version of transformeroptimus/superagi. The issue arises because the '/get/organisation/' endpoint fails to verify the user's organization. This flaw enables any authenticated user to access sensitive configuration details, such as API keys, from any organization. The potential consequences include unauthorized access to services and significant data breaches or financial losses.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive organizational data, including API keys, leading to data breaches or financial losses.