CVE-2024-27564: SSRF Vulnerability Puts AI-Integrated Systems at Risk

CVE-2024-27564 is an SSRF vulnerability in the pictureproxy.php component of certain ChatGPT implementations, allowing attackers to inject malicious URLs and force arbitrary requests. Despite its CVSS score of 6.5, it has been actively exploited, with over 10,479 attack attempts reported in a week. Key targets include financial, healthcare, and government sectors, with U.S. entities facing 33% of attacks. The EPSS score surged from 1.67% to 55.36%, highlighting the need for organizations to secure AI-integrated systems against exploitation.