ChatGPT HTML Preview Flaw Let Shared Links Hijack Accounts
A sandbox escape in ChatGPT's HTML preview feature let attackers take over any account via a single shared link. Parameter Labs detailed how a malicious conversation could execute JavaScript in a victim's signed-in session and exfiltrate private
Built from 3 signals across 3 sources · 281 items reviewed