Parameter's ChatGPT sandbox escape: a MathLive postMessage listener skipped origin checks, so previewed HTML injected ma...

Parameter's ChatGPT sandbox escape: a MathLive postMessage listener skipped origin checks, so previewed HTML injected markup via innerHTML, spawned an unsandboxed srcdoc iframe with chatgpt.com origin, then bypassed CSP through YouTube JSONP. Payload could call authenticated APIs and read private chats from a shared link. OpenAI patched it Oct 26, rated P1. #infosec #AIhttps://www.parameter.ai/labs/we-found-a-gap-at-openai

Read Original

Related