CVE-2024-48145

CRITICAL

ChatNet AI v1.0 - Prompt Injection via Crafted Message

Title source: llm
STIX 2.1

Description

A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

References (2)

Core 2

Scores

CVSS v3 9.1
EPSS 0.0054
EPSS Percentile 41.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-77
Status published
Published Oct 24, 2024
Tracked Since Feb 18, 2026