Researchers found a chain of flaws that turned an ordinary public ChatGPT share link into attacker-controlled JavaScript running inside the victim’s signed-in session. OpenAI fixed the issue on October 26 and classified it as P1. The Parameter researchers’ full technical write-up says the bug earned a $5,000 bounty. High-Severity ChatGPT Flaw An attacker published a […]
Read the original article:
Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers
