CVE-2024-8183highCWE-346

CVE-2024-8183: falha de alta gravidade em prefecthq/prefect

CORS Misconfiguration in prefecthq/prefect

Publicada em

Seguir esta CVE+ Monitorar prefecthq/prefect+ Monitorar prefect

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.6epss 0.2%
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Produtos afetados
prefecthq · prefecthq/prefect
CVEs relacionadas — prefecthq/prefect

No mesmo produto, das mais perigosas para as menos.

CVE-2026-5366CRITICALGit Argument Injection in prefecthq/prefectEPSS 1.0%CVE-2026-3514HIGHAuthentication Bypass in prefecthq/prefectEPSS 0.5%CVE-2023-6022HIGHCross-Site Request Forgery (CSRF) in prefecthq/prefectEPSS 0.4%CVE-2026-3515HIGHArgument Injection in prefecthq/prefectEPSS 0.3%