CVE-2024-8183

Published: Mar 20, 2025Modified: Jun 17, 2026Deferred

7.6

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Exploitability: 2.8 / Impact: 4.7

Source: security@huntr.dev (Secondary)

Description

A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.

Related CWEs

CWE-346

Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

References (2)

https://github.com/prefecthq/prefect/commit/a69266e077169b8a32ad76b1dd3ea63b96d011c2

Source: security@huntr.dev

https://huntr.com/bounties/b801de43-ff9f-4db9-b583-4797d4f7d3d2

Source: security@huntr.dev

Timeline

No history available yet.