7.6
Élevée
CVE-2024-8183 A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized…
Description
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| prefecthq/prefect 3.0 | premières → < 3.0.3 | 3.0.3 |
Références
- huntr.com huntr.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de prefecthq/prefect
Les 5 CVE de prefecthq/prefect →
CVE-2026-5366
Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the…
9.9
Critique
CVE-2026-3514
In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of…
7.5
Élevée
CVE-2026-3515
A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows…
8.5
Élevée
CVE-2023-6022
Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5
8.8
Élevée