writeups.xyz / Lethal Injection: How We Hacked Microsoft's Healthcare Chat Bot

Submitter : c2a

Date: 7 May 2024

Bounty : 203,000

Vulnerabilities :

• Chatbot
• Sandbox Escape
• Cross-Tenant Vulnerability
• RCE
• Memory Leak

Programs :

• Microsoft

Authors :

• Yanir Tsarimi (@Yanir_)

Link :
https://www.breachproof.net/blog/lethal-injection-how-we-hacked-microsoft-ai-chat-bot