CVE-2024-8183
CORS Misconfiguration in prefecthq/prefect
- State
- Published
- Severity
- 7.6 High
- Published
- Mar 20, 2025
- Updated
- Mar 20, 2025
- Reserved
- Aug 26, 2024
Description
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.6 High | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L | @huntr_ai |
Weaknesses
- CWE-346 Origin Validation Error
Affected Products
| Product | Versions |
|---|---|
prefecthq/prefectprefecthq |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.