- CVSS
- HIGH · 7.5 v3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Published
- 2024-10-24
- Weakness
- CWE-77
- Source
- nvd.nist.gov/vuln/detail/CVE-2024-48142
Description
A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica ChatGPT AI Assistant v2.4.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.
References
How GTK Cyber trains on this
AI security training at GTK Cyber covers the LLM and ML-pipeline vulnerability classes that vulnerabilities like CVE-2024-48142 fall into. Our hands-on courses are taught by Charles Givre and other practitioners who break and defend production AI systems.