CVE-2024-48144

CVSS 9.1 CRITICALEPSS 0.5%CWE-77

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.1EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

24 oct 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A prompt injection vulnerability in the chatbox of Fusion Chat Chat AI Assistant Ask Me Anything v1.2.4.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Productos afectados

n/a · n/a

Referencias

https://apps.microsoft.com/detail/9n3ff8j3d7zr?hl=en-US&gl=US https://github.com/soursec/CVEs/tree/main/CVE-2024-48144