Chained flaw in ChatGPT public share links exposed private conversations
VULNERABILITYChatGPTredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Researchers chained several flaws so that a public ChatGPT share link ran attacker-controlled JavaScript inside the victim's authenticated session, putting private conversations at risk. OpenAI fixed the issue on October 26 and classified it as P1, and the Parameter researchers' write-up says it earned a $5,000 bounty.
For IT people · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies
Products