Vulnerability · Published Jun 5, 2024 · Assigned by SNPS

CVE-2024-5184Prompt Injection in EmailGPT

Medium 6.5

In plain English

A medium-severity injection in EmailGPT from EmailGPT. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.5%top 54.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take over the service logic. Attackers can exploit the issue by forcing the AI service to leak the standard hard-coded system prompts and/or execute unwanted prompts. When engaging with EmailGPT by submitting a malicious prompt that requests harmful information, the system will respond by providing the requested data. This vulnerability can be exploited by any individual with access to the service.

Affected products (as reported)

Vendor	Product	Versions
EmailGPT	EmailGPT	0 – through eecfaf2cff58793549dd0c1266ac1d62e0c8811d

Weakness: CWE-74 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

https://www.synopsys.com/blogs/software-security/cyrc-advisory-prompt-injection-emailgpt.html