Approved changes feed: RSS · Atom

cpe:2.3:a:butterflyeffectpte:monica:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorButterflyeffectpte (67d49348-b3d2-5c9c-8f07-90ee6bda3866)
ProductMonica (7d9e4903-4c30-56b2-8c18-7d99f36f022e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-48142 vulnerable 2026-06-08 06:48:13.639838 Details available
A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica ChatGPT AI Assistant v2.4.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.
Published: 2024-10-24T00:00:00.000Z
Updated: 2024-10-25T17:50:54.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48140 vulnerable 2026-06-08 06:48:13.637903 Details available
A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica Your AI Copilot powered by ChatGPT4 v6.3.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.
Published: 2024-10-24T00:00:00.000Z
Updated: 2024-10-25T18:41:46.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45989 vulnerable 2026-06-08 06:48:09.899498 Details available
Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. A prompt injection allows an attacker to modify chatbot answer with an unloaded image that exfiltrates the user's sensitive chat data of the current session to a malicious third-party or attacker-controlled server.
Published: 2024-09-26T00:00:00.000Z
Updated: 2024-09-27T14:55:41.032Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.