CVE-2024-48139 Information

Description

A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.

Reference

https://marketplace.visualstudio.com/items?itemName=Blackboxapp.blackbox https://github.com/soursec/CVEs/tree/main/CVE-2024-48139