Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ChatGPT Plugin Flaw – attackers could access private GitHub repos of others

scmagazine.com

Post reply on HN
Print view View original

1–4 of 4 posts

Re: ChatGPT Plugin Flaw – attackers could access private GitHub repos of others

#3

Post by aviCC »

Technical details: "The plugin does not authenticate the request, which means that the attacker can insert another memberId (aka the victim) and get a code that represents the victim. With that code, he can use ChatGPT and access the GitHub of the victim."

Re: ChatGPT Plugin Flaw – attackers could access private GitHub repos of others

#4

Post by aviCC »

aviCC wrote: post #3

Technical details: "The plugin does not authenticate the request, which means that the attacker can insert another memberId (aka the victim) and get a code that represents the victim. With that code, he can use ChatGPT and access the GitHub of the victim."

And a link, if you want to read the official blog post: https://salt.security/blog/security-flaws-within-chatgpt-ext...
Post reply on HN