pentester.land· May 7, 2024· by Yanir Tsarimi (@Yanir_)💰 Bounty: 203,000

Lethal Injection: How We Hacked Microsoft's Healthcare Chat Bot

Target Program: Microsoft

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#Chatbot#Sandbox escape#Cross-tenant vulnerability#RCE#Memory leak