CVE-2024-8183highCWE-346

CVE-2024-8183: high-severity vulnerability in prefecthq/prefect

CORS Misconfiguration in prefecthq/prefect

Published

Follow this CVE+ Monitor prefecthq/prefect+ Monitor prefect

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.6epss 0.2%
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Affected products
prefecthq · prefecthq/prefect
Related CVEs — prefecthq/prefect

In the same product, most dangerous first.

CVE-2026-5366CRITICALGit Argument Injection in prefecthq/prefectEPSS 1.0%CVE-2026-3514HIGHAuthentication Bypass in prefecthq/prefectEPSS 0.5%CVE-2023-6022HIGHCross-Site Request Forgery (CSRF) in prefecthq/prefectEPSS 0.4%CVE-2026-3515HIGHArgument Injection in prefecthq/prefectEPSS 0.3%