{"data":{"id":"87b141f5-10dc-44bd-8491-2a56329fdd4c","title":"CVE-2024-48144: A prompt injection vulnerability in the chatbox of Fusion Chat Chat AI Assistant Ask Me Anything v1.2.4.0 allows…","summary":"CVE-2024-48144 describes a prompt injection vulnerability in the chatbox of Fusion Chat Chat AI Assistant Ask Me Anything v1.2.4.0. A crafted message lets attackers access and exfiltrate all previous and subsequent chat data between the user and the AI assistant. NVD has not yet provided an assessment, and the record is linked to CWE-77 (Command Injection).","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-48144","publishedAt":"2024-10-24T19:15:15.510Z","cveId":"CVE-2024-48144","cweIds":["CWE-77"],"cvssScore":"9.1","cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Fusion Chat Chat AI Assistant Ask Me Anything v1.2.4.0"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Fusion Chat AI Assistant prompt injection exposes chat data","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00555,"epssCheckedAt":"2026-11-04T12:08:33.950Z","kevDateAdded":null,"advisoryAliases":["GHSA-jg3p-mpfh-w2hg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:12.943Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}