{"data":{"id":"0de387a9-4e02-43bd-962b-2a5c797e5853","title":"CVE-2024-48142: A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica ChatGPT AI Assistant v2.4.0 allows…","summary":"CVE-2024-48142 describes a prompt injection vulnerability in the chatbox of Butterfly Effect Limited's Monica ChatGPT AI Assistant v2.4.0. A crafted message allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant. The NVD had not yet provided an assessment, and the weakness is mapped to CWE-77.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-48142","publishedAt":"2024-10-24T23:15:15.333Z","cveId":"CVE-2024-48142","cweIds":["CWE-77"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Monica ChatGPT AI Assistant","Monica"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Monica ChatGPT AI Assistant prompt injection in chatbox exposes chat data","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00419,"epssCheckedAt":"2026-11-04T18:09:13.788Z","kevDateAdded":null,"advisoryAliases":["GHSA-w7vv-chh5-rjfj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:11.659Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}