Skip to content
Sign in
7.6 High

CVE-2024-8183 A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized…

Description

A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.

Affected products and versions

Product Affected versions Fixed in
prefecthq/prefect 3.0 earliest → < 3.0.3 3.0.3

Other CVEs of prefecthq/prefect

The 5 CVEs of prefecthq/prefect →
CVE-2026-5366 Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the… 9.9 Critical CVE-2026-3514 In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of… 7.5 High CVE-2026-3515 A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows… 8.5 High CVE-2023-6022 Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5 8.8 High
Track this CVE