ChatGPT share-link chain let attackers run script in signed-in sessions
OpenAI rated the issue P1, paid a $5,000 bounty, and blocked the cross-frame MathLive messages on both web frontends by October 26.
72
OpenAI rated the issue P1, paid a $5,000 bounty, and blocked the cross-frame MathLive messages on both web frontends by October 26.
Parameter reported the P1 issue on October 18; OpenAI fixed both web frontends by October 26 and paid $5,000.
Today 1.2K readers · 1.7K views · 666 reads · all time 169K views