- CVSS
- HIGH · 7.5 v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Published
- 2024-10-24
- Weakness
- CWE-77
- Source
- nvd.nist.gov/vuln/detail/CVE-2024-48140
Description
A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica Your AI Copilot powered by ChatGPT4 v6.3.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.
References
How GTK Cyber trains on this
AI security training at GTK Cyber covers the LLM and ML-pipeline vulnerability classes that vulnerabilities like CVE-2024-48140 fall into. Our hands-on courses are taught by Charles Givre and other practitioners who break and defend production AI systems.