ChatGPT writes code that makes databases leak sensitive information
Date: 2023
Affected: Downstream developers / data subjects
Attack vector: other
Category: real-world
Severity: Medium

Studies and red-team reports documented ChatGPT producing application code that exposed databases via SQL-injection-prone queries, missing input validation, or insecure default configurations, when developers shipped the suggestions without review.


Mitigations:

Architectural layers (MAESTRO):