{"data":{"id":"aca69188-4a04-4579-b53b-5416f29c700b","title":"CVE-2024-48145: A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to…","summary":"CVE-2024-48145 describes a prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI, Version v1.0. A crafted message allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant. The NVD assessment is not yet provided, and the weakness is classified as CWE-77.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-48145","publishedAt":"2024-10-24T19:15:15.607Z","cveId":"CVE-2024-48145","cweIds":["CWE-77"],"cvssScore":"9.1","cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection","data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["ChatNet AI","Netangular Technologies ChatNet AI v1.0"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Netangular Technologies ChatNet AI prompt injection in chatbox exposes chat data","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00555,"epssCheckedAt":"2026-11-04T12:08:35.127Z","kevDateAdded":null,"advisoryAliases":["GHSA-9r7v-6wjc-j5fj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:12.466Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}