CVE-2024-48139

Description

A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

References

https://marketplace.visualstudio.com/items?itemName=Blackboxapp.blackbox

https://github.com/soursec/CVEs/tree/main/CVE-2024-48139

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3