LLMHigh
CVE-2024-48139: A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access an…
- Occurred
- Oct 24, 2024
- Published
- Oct 24, 2024
- Source
- NVD CVE
Summary
A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.
Tags
- CVE
- CVE-2024-48139
- cvss:HIGH
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Prompt injection vulnerability in AI chatbot enabling data exfiltration, representing a significant security breach.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8