pentester.land· Feb 4, 2024· by Harel (@h4r3l)💰 Bounty: 6,500

ChatGPT Account Takeover - Wildcard Web Cache Deception

Open Original Article ↗
Target Program: OpenAI (ChatGPT)
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#AI#LLM#Web cache deception#Account takeover#Path traversal#URL parsing issue