CVE-2024-48144

CRITICAL

Fusion Chat Chat AI Assistant Ask Me Anything <1.2.4.0 - Info Discl...

Title source: llm
STIX 2.1

Description

A prompt injection vulnerability in the chatbox of Fusion Chat Chat AI Assistant Ask Me Anything v1.2.4.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

References (2)

Core 2

Scores

CVSS v3 9.1
EPSS 0.0025
EPSS Percentile 47.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-77
Status published
Published Oct 24, 2024
Tracked Since Feb 18, 2026