CVE-2023-48055: High severity superagi vulnerability

Published Nov 16, 2023

Updated

SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This vulnerability can lead to the disclosure of information and communications.

Affected Software

1 affected component

superagi SuperAGI=0.0.13

Event History

Nov 16, 2023

CVE Published

12:00 AM

Data Sourced

12:00 AM

Description

Frequently Asked Questions

What is the vulnerability ID for the SuperAGI v0.0.13 vulnerability?

The vulnerability ID for the SuperAGI v0.0.13 vulnerability is CVE-2023-48055.

What is the severity of CVE-2023-48055?

The severity of CVE-2023-48055 is high with a CVSS score of 7.5.

What does the SuperAGI v0.0.13 vulnerability involve?

The SuperAGI v0.0.13 vulnerability involves the use of a hardcoded key for encryption operations.

What are the potential consequences of CVE-2023-48055?

The potential consequences of CVE-2023-48055 include the disclosure of information and communications.

What software versions are affected by CVE-2023-48055?

The SuperAGI v0.0.13 vulnerability affects version 0.0.13 of the SuperAGI software.

How can I fix CVE-2023-48055?

To fix CVE-2023-48055, it is recommended to update to a version of SuperAGI that does not use a hardcoded key for encryption operations, if available.

Is there any additional information available about CVE-2023-48055?

Yes, you can find additional information about CVE-2023-48055 at the following reference: [https://gxx777.github.io/SuperAGI_v0.0.13_Cryptographic_API_Misuse_Vulnerability.md](https://gxx777.github.io/SuperAGI_v0.0.13_Cryptographic_API_Misuse_Vulnerability.md)