codegeex vulnerabilities
1 known vulnerability in codegeex from Zhipu Ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
codegeex: Improper Neutralization of Special Elements used in a Command
A prompt injection vulnerability in the chatbox of Zhipu AI CodeGeeX v2.17.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message.