Chatbox History Exfiltration via Prompt Injection (CVE-2024-48144, CVE-2024-48145) - ATR-2026-00431 (308bcc90-4e28-50f1-a852-503396996487)
Detects prompt-injection attacks targeting chatbox interfaces that ask the assistant to dump prior or subsequent conversation turns, system prompts, or hidden context. Two real-world disclosures use this exact attack class: CVE-2024-48144 (Fusion Chat AI Assistant v1.2.4.0, CVSS 9.1) and CVE-2024-48145 (Netangular ChatNet AI v1.0, CVSS 9.1). Both allow an attacker to "access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message." This rule detects the prompt patterns themselves, not just product-specific PoC.