Paper/Archive/CVE-2024-48145

CVE-2024-48145

netangular chatnet_ai — A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltr…

EPSS 0.6%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 46.4.464 × 209.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

chatnet_ai1.0–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refapps.microsoft.com/detail/9n3zxd05895t?hl=en-us&gl=US refgithub.com/soursec/CVEs/tree/main/CVE-2024-48145